公开(公告)号：US07673335B1

公开(公告)日：2010-03-02

申请号：US10975374

申请日：2004-10-29

申请人： Dipto Chakravarty ,  Ofer Zajicek ,  Frank Pellegrino ,  Usman Choudhary ,  John Gassner ,  Melvin Antony

发明人： Dipto Chakravarty ,  Ofer Zajicek ,  Frank Pellegrino ,  Usman Choudhary ,  John Gassner ,  Melvin Antony

IPC分类号： G06F12/14

CPC分类号： G06F21/554 ,  G06F21/552

摘要： A system and method for analyzing events from devices relating to network security, includes a device interface(s), for receiving events from devices. One or more processors, responsive to the event received pursuant to the device interfaces, evaluate the event in accordance with rules, wherein the rules define, inter alia, an operation the system is to take to evaluate the event and an action to be taken under specified conditions. Also, the processor can determine, responsive to the received event, whether the event is of interest, and if not, discarding the event. The processor can provide a correlation corresponding to the at least one event, for the rules.

摘要翻译： 用于分析与网络安全有关的设备的事件的系统和方法包括用于从设备接收事件的设备接口。 响应于根据设备接口接收到的事件的一个或多个处理器根据规则来评估事件，其中规则除其他外定义系统要采取的操作以评估事件和要采取的行动 指定条件。 此外，处理器可以响应于所接收的事件来确定事件是否是感兴趣的，如果不是，则丢弃该事件。 对于规则，处理器可以提供对应于至少一个事件的相关性。