The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Jul. 11, 2006
Filed:
Jan. 28, 2002
David Aro Bruton, Iii, Raleigh, NC (US);
Patricia Jakubik, Raleigh, NC (US);
Patrick Michael Livecchi, Raleigh, NC (US);
Linwood Hugh Overby, Jr., Raleigh, NC (US);
David Aro Bruton, III, Raleigh, NC (US);
Patricia Jakubik, Raleigh, NC (US);
Patrick Michael LiVecchi, Raleigh, NC (US);
Linwood Hugh Overby, Jr., Raleigh, NC (US);
International Business Machines Corporation, Armonk, NY (US);
Abstract
Improvements in intrusion detection are disclosed by providing integrated intrusion detection services. Preferably, these services are integrated into a system or server that is the potential target of attack. Stack-based security processing is leveraged for access to cleartext data within the layers of the protocol stack. Layer-specific attacks may therefore be processed efficiently. Evaluation of incoming traffic for an intrusion is preferably performed only after an error condition of some type has been detected. This approach reduces the overhead of intrusion detection by reducing the number of packets to be inspected, and at the same time allows more efficient packet inspection through use of context-specific information that may be used to direct the inspection to particular candidate attacks. Generic attack class capability is also disclosed. Intrusion detection policy information may be used to direct the actions to be taken upon detecting an attack.