The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Nov. 11, 2008
Filed:
Aug. 31, 2004
Craig Cantrell, Austin, TX (US);
Marc Willebeek-lemair, Austin, TX (US);
Dennis Cox, Austin, TX (US);
John Mchale, Austin, TX (US);
Brian Smith, Fort Worth, TX (US);
Donovan Kolbly, Austin, TX (US);
Craig Cantrell, Austin, TX (US);
Marc Willebeek-Lemair, Austin, TX (US);
Dennis Cox, Austin, TX (US);
John McHale, Austin, TX (US);
Brian Smith, Fort Worth, TX (US);
Donovan Kolbly, Austin, TX (US);
TippingPoint Technologies, Inc., Austin, TX (US);
Abstract
An active network defense system is provided that is operable to monitor and block traffic in an automated fashion. This active network defense system is placed in-line with respect to the packet traffic data flow as a part of the network infrastructure. In this configuration, inspection and manipulation of every passing packet is possible. An algorithmic filtering operation applies statistical threshold filtering to the data flow in order to identify threats existing across multiple sessions. A trigger filtering operation applies header and content match filtering to the data flow in order to identify threats existing within individual sessions. Threatening packet traffic is blocked and threatening sessions are terminated. Suspicious traffic is extracted from the data flow for further examination with more comprehensive content matching as well as asset risk analysis. A flow control mechanism is provided to control passage rate for packets passing through the data flow.