Hewlett-Packard Development Company, L.p.

Hewlett-Packard Company

Steve Britt

Ramachandra Yalakanti

Devon L Dawson

Linda Ann Klinger

Methods, systems and computer readable mediums storing computer executable programs for managing security in a network are disclosed. A plurality of security policies associated with a plurality of network data anomalies are provided at a network management system. Each one of the plurality of security policies defines a network data anomaly specific mitigation response for each one of the plurality of network data anomalies. A first network data anomaly is detected at the network management system. A determination is made at the network management system regarding whether a first one of the plurality of security policies defines a first network data anomaly specific mitigation response to the first network data anomaly. A first mitigation command is issued from the network management system to at least one network system to implement the first network data anomaly specific mitigation response for a pre-defined period of time in accordance with the first security policy based on the determination.

Methods and systems for managing security in a network

Methods and associated systems for dynamically measuring the capacity of a host system to gather network management data by a network management system application. The methods of the present invention are operable as part of a network management system on host systems of the network management applications. An NMS application is provided a list of other nodes on the network with which it will likely exchange data to perform desired network management functions. The NMS application then directs a steady stream of data units to the identified nodes which, in turn, echo the received data units back to the originating host system. The data units are sequentially identified with, at least, a sequence number. The NMS application then examines the data unit received back from the nodes. If no packets are missing as indicated by the sequence numbers, then the frequency of data unit generation and transmission is increased to identify a saturation point at which returned data units are lost by the NMS application's host system. Reaching this saturation point is indicative of over subscription of at least one computing resource required by the network management application on the host computer. This dynamically measured value is then used to optimize the performance of the NMS application by governing its exchange of other data units for purposes of network management.

Growing community of inventors

Roseville, CA, United States of America

Steve Britt