发明申请
- 专利标题： Systems and Methods for Correlating and Distributing Intrusion Alert Information Among Collaborating Computer Systems
- 专利标题（中）： 在协作计算机系统中关联和分发入侵警报信息的系统和方法
-
申请号： US12833743申请日： 2010-07-09
-
公开(公告)号： US20100281541A1公开(公告)日： 2010-11-04
- 发明人: Salvatore J. Stolfo , Tal Malkin , Angelos D. Keromytis , Vishal Misra , Michael Locasto , Janak Parekh
- 申请人： Salvatore J. Stolfo , Tal Malkin , Angelos D. Keromytis , Vishal Misra , Michael Locasto , Janak Parekh
- 申请人地址： US NY New York
- 专利权人： The Trustees of Columbia University in the City of New York
- 当前专利权人： The Trustees of Columbia University in the City of New York
- 当前专利权人地址： US NY New York
- 主分类号： G06F11/00
- IPC分类号： G06F11/00
摘要：
Systems and methods for correlating and distributing intrusion alert information among collaborating computer systems are provided. These systems and methods provide an alert correlator and an alert distributor that enable early signs of an attack to be detected and rapidly disseminated to collaborating systems. The alert correlator utilizes data structures to correlate alert detections and provide a mechanism through which threat information can be revealed to other collaborating systems. The alert distributor uses an efficient technique to group collaborating systems and then pass data between certain members of those groups according to a schedule. In this way data can be routinely distributed without generating excess traffic loads.
公开/授权文献
信息查询
