专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20100235879A1 SYSTEMS, METHODS, AND MEDIA FOR ENFORCING A SECURITY POLICY IN A NETWORK INCLUDING A PLURALITY OF COMPONENTS 有权
标题翻译：用于执行网络中的安全策略的系统，方法和媒体，包括大量组件
公开(公告)号：US20100235879A1
公开(公告)日：2010-09-16
申请号：US12632934
申请日：2009-12-08
申请人： Matthew Burnside , Angelos D. Keromytis
发明人： Matthew Burnside , Angelos D. Keromytis
IPC分类号： G06F11/00 , G06F17/00 , H04L29/06 , G06F15/16 , G06F17/30
CPC分类号： H04L63/0263 , G06F2221/2101 , H04L63/1416 , H04L63/1425
摘要： Systems, methods, and media for enforcing a security policy in a network are provided, including, for example, receiving a plurality of events describing component behavior detected by a plurality of sensors, each sensor monitoring a different component of a plurality of components; attributing a first event of the plurality of events to a first principal; attributing a second event of the plurality of events to a second principal; determining whether the first and second events are correlated; storing a data structure that attributes each of the first and second events to the first principal, if it is determined that the first and second events are correlated; comparing the second event to the security policy; and modifying network behavior to enforce the security policy against the first principal based on the comparison of the second event to the security policy and the attribution of the second event to the first principal.
摘要翻译：提供了用于在网络中实施安全策略的系统，方法和媒体，包括例如接收描述由多个传感器检测到的组件行为的多个事件，每个传感器监视多个组件的不同组件; 将所述多个事件的第一事件归因于第一主体; 将所述多个事件的第二事件归因于第二主体; 确定所述第一和第二事件是否相关; 如果确定所述第一和第二事件相关，则存储将所述第一和第二事件中的每一个归属于所述第一主体的数据结构; 将第二个事件与安全策略进行比较; 以及基于所述第二事件与所述安全策略的比较以及所述第二事件对所述第一主体的归属，修改网络行为以对所述第一主体执行所述安全策略。

2. 发明授权

US08516575B2 Systems, methods, and media for enforcing a security policy in a network including a plurality of components 有权
标题翻译：用于在包括多个组件的网络中执行安全策略的系统，方法和媒体
公开(公告)号：US08516575B2
公开(公告)日：2013-08-20
申请号：US12632934
申请日：2009-12-08
申请人： Matthew Burnside , Angelos D. Keromytis
发明人： Matthew Burnside , Angelos D. Keromytis
IPC分类号： H04L29/06 , G06F11/00 , G06F12/14 , G06F12/16 , G08B23/00
CPC分类号： H04L63/0263 , G06F2221/2101 , H04L63/1416 , H04L63/1425
摘要： Systems, methods, and media for enforcing a security policy in a network are provided, including, for example, receiving a plurality of events describing component behavior detected by a plurality of sensors, each sensor monitoring a different component of a plurality of components; attributing a first event of the plurality of events to a first principal; attributing a second event of the plurality of events to a second principal; determining whether the first and second events are correlated; storing a data structure that attributes each of the first and second events to the first principal, if it is determined that the first and second events are correlated; comparing the second event to the security policy; and modifying network behavior to enforce the security policy against the first principal based on the comparison of the second event to the security policy and the attribution of the second event to the first principal.
摘要翻译：提供了用于在网络中实施安全策略的系统，方法和媒体，包括例如接收描述由多个传感器检测到的组件行为的多个事件，每个传感器监视多个组件的不同组件; 将所述多个事件的第一事件归因于第一主体; 将所述多个事件的第二事件归因于第二主体; 确定所述第一和第二事件是否相关; 如果确定所述第一和第二事件相关，则存储将所述第一和第二事件中的每一个归属于所述第一主体的数据结构; 将第二个事件与安全策略进行比较; 以及基于所述第二事件与所述安全策略的比较以及所述第二事件对所述第一主体的归属，修改网络行为以对所述第一主体执行所述安全策略。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式