The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
May. 06, 2014
Filed:
Feb. 02, 2009
Micha Moffie, Somerville, MA (US);
David Kaeli, Medway, MA (US);
Aviram Cohen, Lexington, MA (US);
Javed Aslam, Weston, MA (US);
Malak Alshawabkeh, Quincy, MA (US);
Jennifer Dy, Framingham, MA (US);
Fatemeh Azmandian, Taunton, MA (US);
Micha Moffie, Somerville, MA (US);
David Kaeli, Medway, MA (US);
Aviram Cohen, Lexington, MA (US);
Javed Aslam, Weston, MA (US);
Malak Alshawabkeh, Quincy, MA (US);
Jennifer Dy, Framingham, MA (US);
Fatemeh Azmandian, Taunton, MA (US);
Northeastern University, Boston, MA (US);
Abstract
An intrusion detection system collects architectural level events from a Virtual Machine Monitor where the collected events represent operation of a corresponding Virtual Machine. The events are consolidated into features that are compared with features from a known normal operating system. If an amount of any differences between the collected features and the normal features exceeds a threshold value, a compromised Virtual Machine may be indicated. The comparison thresholds are determined by training on normal and abnormal systems and analyzing the collected events with machine learning algorithms to arrive at a model of normal operation.