The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
May. 02, 2006

Filed:

Aug. 30, 2001
Applicants:

Steven Black, Round Rock, TX (US);

Herve Debar, Caen, FR;

John Michael Garrison, Austin, TX (US);

Andreas Wespi, Mettmenhasli, CH;

Inventors:

Steven Black, Round Rock, TX (US);

Herve Debar, Caen, FR;

John Michael Garrison, Austin, TX (US);

Andreas Wespi, Mettmenhasli, CH;

Attorneys:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 15/16 (2006.01); G06F 15/173 (2006.01); G06F 17/60 (2006.01);
U.S. Cl.
CPC ...
Abstract

A method, computer program product, and apparatus for presenting data about security-related events that puts the data into a concise form is disclosed. Events are abstracted into a set data-type. Sets with common elements are grouped together, and summaries of the groups—'situations' are established from groups whose severity exceeds a threshold value. These groups and situations are then propagated up a hierarchical arrangement of systems and further aggregated so as to provide summary information over a larger group of systems. This hierarchical scheme allows for scalability of the event correlation process across larger networks of systems.


Find Patent Forward Citations

Loading…