Detecting attacks using passive network monitoring

US Patent 9,756,061

September 05, 2017

Embodiments are directed to detecting one or more attacks in a network. One or more network flows may be monitored using one or more network monitoring computers (NMCs). If one or more file write operations are detected based on information included in one or more packets of the one or more network flows, one or more detection rules may be executed to analyze one or more portions of the one or more packets to identify file information that is associated with the one or more file write operations. One or more metrics may be provided based on the one or more detection rules and one or more of the file information, the one or more file write operations, or the like. If one or more metrics exceed one or more threshold values, one or more reports of one or more attacks may be provided.

filed in: Recently Obtained Patents

Our attorneys regularly produce substantive memoranda and news, addressing legal advancements in Trademarks, Intellectual Property, Patents and Litigation.

subscribe to this feed