US6301668B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and system for adaptive network security using network vulnerability assessment
Assignee: Cisco Technology Inc
•
Filing: 1998-12-29
•
Granted: 2001-10-09
•
Expires: 2018-12-29
Abstract
Abstract A method and system for adaptive network security using network vulnerability assessment is disclosed. The method comprises directing a request onto a network. A response to the request is assessed to discover network information. A plurality of analysis tasks are prioritized based upon the network information. The plurality of analysis tasks are to be performed on monitored network data traffic in order to identify attacks upon the network.
Inventors
- 👤 Robert E. Gleichauf
- 👤 William A. Randall
- 👤 Daniel M. Teal
- 👤 Scott V. Waddell
- 👤 Kevin J. Ziese
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 19:48
CPC Classifications
H; H04; H04L; H04L41/00; H04L41/12; H04L41/28; H04L43/00; H04L63/00; H04L63/14; H04L63/1408; H04L63/1416; H04L63/1433; H04L63/1441
Claims Analysis
Total Claims: 124
Claim 1
Independent Claim
74 words
A method for adaptive network security comprising: directing, by a device coupled to a network, a request onto the network; assessing a response to the request to discover network information associated with determining at least one potential network vulnerability; and prioritizing a plurality of analysis tasks based upon the network information, the plurality of analysis tasks to be performed on network data traffic which is monitored in order to identify attacks upon the network.
Claim 2
Independent Claim
74 words
A method for adaptive network security comprising: directing, by a device coupled to a network, a request onto the network; assessing a response to the request to discover network information associated with determining at least one potential network vulnerability; and prioritizing a plurality of analysis tasks based upon the network information, the plurality of analysis tasks to be performed on network data traffic which is monitored in order to identify attacks upon the network.
Claim 3
Dependent Claim
19 words
The method of claim 1 , wherein the directing step comprises scanning a plurality of devices on the network.
Claim 4
Dependent Claim
23 words
The method of claim 1 , further comprising disabling a particular analysis task based upon an assigned priority of the particular analysis task.
Claim 5
Dependent Claim
26 words
The method of claim 3 , further comprising: monitoring a processor utilization; and performing the disabling step if the processor utilization exceeds a first defined threshold.
Claim 6
Dependent Claim
23 words
The method of claim 4 , further comprising re-enabling the particular analysis task if the processor utilization drops below a second defined threshold.
Claim 7
Dependent Claim
25 words
The method of claim 3 , further comprising: monitoring memory utilization; and performing the disabling step if the memory utilization exceeds a third defined threshold.
Claim 8
Dependent Claim
23 words
The method of claim 6 , further comprising re-enabling the particular analysis task if the memory utilization drops below a fourth defined threshold.
Claim 9
Dependent Claim
42 words
The method of claim 1 , wherein the prioritizing step comprises: determining a probable success of a particular attack upon the network based upon the network information; and assigning a priority to the particular analysis task intended to detect the particular attack.
Claim 10
Dependent Claim
27 words
The method of claim 1 , wherein network information comprises: devices coupled to the network; operating systems running on the devices; and services available on the devices.
Claim 11
Dependent Claim
23 words
The method of claim 9 , further comprising identifying potential vulnerabilities of a device coupled to the network based upon the network information.
Claim 12
Dependent Claim
21 words
The method of claim 10 , further comprising confirming an identified potential vulnerability through an active exploit of the potential vulnerability.
Claim 13
Dependent Claim
16 words
The method of claim 1 , further comprising maintaining the network information in a network map.
Claim 14
Dependent Claim
15 words
The method of claim 1 , wherein the plurality of analysis tasks includes checksum verification.
Claim 15
Dependent Claim
16 words
The method of claim 1 , wherein the plurality of analysis tasks includes IP fragment reassembly.
Claim 16
Dependent Claim
16 words
The method of claim 1 , wherein the plurality of analysis tasks include TCP stream reassembly.
Claim 17
Dependent Claim
15 words
The method of claim 1 , wherein the plurality of analysis tasks includes timeout calculations.
Claim 18
Dependent Claim
29 words
The method of claim 1 , wherein the plurality of analysis tasks includes a plurality of comparisons between the monitored network data traffic and a plurality of attack signatures.
Claim 19
Dependent Claim
13 words
The method of claim 17 , further comprising disabling a particular attack signature.
Claim 20
Dependent Claim
27 words
The method of claim 1 , further comprising: repeating the directing step to obtain updated network information; and repeating the prioritizing step using the updated network information.
Claim 21
Dependent Claim
56 words
The method of claim 1 , wherein the directing step comprises sending a query to a domain mapping service, wherein the domain mapping service maintains a compilation of network information, and further wherein the domain mapping service is operable to respond to such a request by sending the network information to a source of the request.
Claim 22
Dependent Claim
35 words
The method of claim 1 , further comprising: prioritizing a plurality of system services based upon the network information; and disabling a particular system service based upon an assigned priority of the particular system service.
Claim 23
Dependent Claim
13 words
The method of claim 1 , wherein the device comprises a scan engine.
Claim 24
Dependent Claim
14 words
The method of claim 1 , wherein the device comprises a network security device.
Claim 25
Independent Claim
116 words
A method for adaptive network security comprising: directing, by a device coupled to a network, a request onto the network; assessing a response to the request to discover network information associated with determining at least one potential network vulnerability; prioritizing a plurality of protocol analyses to be performed on network data traffic which is monitored, the protocol analyses for identifying attacks upon the network; monitoring a processor utilization of processor resources; monitoring memory utilization of memory resources; disabling a particular protocol analysis based upon an assigned priority if the processor utilization exceeds a first defined threshold; and disabling a particular protocol analysis based upon an assigned priority if the memory utilization exceeds a third defined threshold.
Claim 26
Independent Claim
116 words
A method for adaptive network security comprising: directing, by a device coupled to a network, a request onto the network; assessing a response to the request to discover network information associated with determining at least one potential network vulnerability; prioritizing a plurality of protocol analyses to be performed on network data traffic which is monitored, the protocol analyses for identifying attacks upon the network; monitoring a processor utilization of processor resources; monitoring memory utilization of memory resources; disabling a particular protocol analysis based upon an assigned priority if the processor utilization exceeds a first defined threshold; and disabling a particular protocol analysis based upon an assigned priority if the memory utilization exceeds a third defined threshold.
Claim 27
Dependent Claim
28 words
The method of claim 24 , wherein the network information comprises: devices coupled to the network; operating systems running on the devices; and services available on the devices.
Claim 28
Dependent Claim
13 words
The method of claim 25 , further comprising confirming each identified potential vulnerability.
Claim 29
Dependent Claim
19 words
The method of claim 24 , wherein the directing step comprises scanning a plurality of devices on the network.
Claim 30
Dependent Claim
17 words
The method of claim 24 , further comprising identifying potential vulnerabilities of devices coupled to the network.
Claim 31
Dependent Claim
23 words
The method of claim 24 , further comprising re-enabling the particular analysis task if the processor utilization drops below a second defined threshold.
Claim 32
Dependent Claim
23 words
The method of claim 24 , further comprising re-enabling the particular analysis task if the memory utilization drops below a fourth defined threshold.
Claim 33
Dependent Claim
15 words
The method of claim 24 , wherein the plurality of protocol analyses includes checksum verification.
Claim 34
Dependent Claim
16 words
The method of claim 24 , wherein the plurality of protocol analyses includes IP fragment reassembly.
Claim 35
Dependent Claim
16 words
The method of claim 24 , wherein the plurality of protocol analyses includes TCP stream reassembly.
Claim 36
Dependent Claim
15 words
The method of claim 24 , wherein the plurality of protocol analyses includes timeout calculations.
Claim 37
Dependent Claim
27 words
The method of claim 24 , further comprising: repeating the directing step to obtain updated network information; and repeating the prioritizing step using the updated network information.
Claim 38
Dependent Claim
56 words
The method of claim 24 , wherein the directing step comprises sending a query to a domain mapping service, wherein the domain mapping service maintains a compilation of network information, and further wherein the domain mapping service is operable to respond to such a request by sending the network information to a source of the request.
Claim 39
Dependent Claim
35 words
The method of claim 24 , further comprising: prioritizing a plurality of system services based upon the network information; and disabling a particular system service based upon an assigned priority of the particular system service.
Claim 40
Dependent Claim
13 words
The method of claim 24 , wherein the device comprises a scan engine.
Claim 41
Independent Claim
118 words
A method for adaptive network security comprising: directing, by a device coupled to a network, a request onto the network; assessing a response to the request to discover network information associated with determining at least one potential network vulnerability; prioritizing a plurality of comparisons between network data traffic which is monitored and a plurality of attack signatures, the attack signatures for identifying attacks upon the network; monitoring a processor utilization of processor resources; monitoring memory utilization of memory resources; disabling a particular attack signature based upon an assigned priority if the processor utilization exceeds a first defined threshold; and disabling a particular attack signature based upon an assigned priority if the memory utilization exceeds a third defined threshold.
Claim 42
Independent Claim
118 words
A method for adaptive network security comprising: directing, by a device coupled to a network, a request onto the network; assessing a response to the request to discover network information associated with determining at least one potential network vulnerability; prioritizing a plurality of comparisons between network data traffic which is monitored and a plurality of attack signatures, the attack signatures for identifying attacks upon the network; monitoring a processor utilization of processor resources; monitoring memory utilization of memory resources; disabling a particular attack signature based upon an assigned priority if the processor utilization exceeds a first defined threshold; and disabling a particular attack signature based upon an assigned priority if the memory utilization exceeds a third defined threshold.
Claim 43
Dependent Claim
17 words
The method of claim 39 , further comprising identifying potential vulnerabilities of devices coupled to the network.
Claim 44
Dependent Claim
13 words
The method of claim 39 , further comprising confirming an identified potential vulnerability.
Claim 45
Dependent Claim
23 words
The method of claim 39 , further comprising re-enabling the particular attack signature if the processor utilization drops below a second defined threshold.
Claim 46
Dependent Claim
23 words
The method of claim 39 , further comprising re-enabling the particular attack signature if the memory utilization drops below a fourth defined threshold.
Claim 47
Dependent Claim
16 words
The method of claim 39 , further comprising maintaining the network information in a network map.
Claim 48
Dependent Claim
27 words
The method of claim 39 , further comprising: repeating the directing step to obtain updated network information; and repeating the prioritizing step using the updated network information.
Claim 49
Dependent Claim
56 words
The method of claim 39 , wherein the directing step comprises sending a query to a domain mapping service, wherein the domain mapping service maintains a compilation of network information, and further wherein the domain mapping service is operable to respond to such a request by sending the network information to a source of the request.
Claim 50
Dependent Claim
35 words
The method of claim 39 , further comprising: prioritizing a plurality of system services based upon the network information; and disabling a particular system service based upon an assigned priority of the particular system service.
Claim 51
Dependent Claim
19 words
The method of claim 39 , wherein the directing step comprises scanning a plurality of devices on the network.
Claim 52
Dependent Claim
41 words
The method of claim 39 , wherein the prioritizing step comprises: determining a likelihood of success of a potential attack based upon the network information; and prioritizing an attack signature of the potential attack according to the determined likelihood of success.
Claim 53
Dependent Claim
27 words
The method of claim 39 , wherein network information comprises: devices coupled to the network; operating systems running on the devices; and services available on the devices.
Claim 54
Dependent Claim
13 words
The method of claim 39 , wherein the device comprises a scan engine.
Claim 55
Independent Claim
137 words
A system for adaptive network security comprising: a scan engine coupled to a network, the scan engine for directing a request onto a network and assessing a response to the request to discover network information associated with determining at least one potential network vulnerability; and a protocol engine coupled to the network, the protocol engine for performing a plurality of protocol analyses on network data traffic to identify attacks upon the network; a signature engine coupled to the network, the signature engine for comparing the network data traffic to a plurality of attack signatures to identify attacks upon the network; and a priority engine coupled to the analysis engine, the protocol engine, and the signature engine, the priority engine for prioritizing the plurality of protocol analyses and the plurality of attack signatures based upon the network information.
Claim 56
Independent Claim
137 words
A system for adaptive network security comprising: a scan engine coupled to a network, the scan engine for directing a request onto a network and assessing a response to the request to discover network information associated with determining at least one potential network vulnerability; and a protocol engine coupled to the network, the protocol engine for performing a plurality of protocol analyses on network data traffic to identify attacks upon the network; a signature engine coupled to the network, the signature engine for comparing the network data traffic to a plurality of attack signatures to identify attacks upon the network; and a priority engine coupled to the analysis engine, the protocol engine, and the signature engine, the priority engine for prioritizing the plurality of protocol analyses and the plurality of attack signatures based upon the network information.
Claim 57
Dependent Claim
21 words
The system of claim 52 , wherein the scan engine is operable to scan a plurality of devices on the network.
Claim 58
Dependent Claim
28 words
The system of claim 52 , wherein the priority engine is operable to disable a particular analysis task based upon an assigned priority of the particular analysis task.
Claim 59
Dependent Claim
29 words
The system of claim 54 , wherein the priority engine is further operable to re-enable the particular analysis task if the memory utilization drops below a fourth defined threshold.
Claim 60
Dependent Claim
45 words
The system of claim 52 , wherein the priority module is further operable to: determine a probable success of a particular attack upon the network based upon the network information; and assign a priority to the particular analysis task intended to detect the particular attack.
Claim 61
Dependent Claim
31 words
The system of claim 52 , wherein the network information comprises: a device coupled to the network; an operating systems running on the device; and a service available on the devices.
Claim 62
Dependent Claim
17 words
The system of claim 57 wherein the network information further comprises a potential vulnerability of the device.
Claim 63
Dependent Claim
27 words
The system of claim 58 , wherein the scan engine is further operable to confirm an identified potential vulnerability through an active exploit of the potential vulnerability.
Claim 64
Dependent Claim
35 words
The system of claim 52 , further comprising a network map coupled to the scan engine and the priority engine; wherein the scan engine is operable to maintain the network information in the network map.
Claim 65
Dependent Claim
56 words
The system of claim 52 , further comprising: a domain mapping service, coupled to the network, wherein the domain mapping service maintains a compilation of network information, and further wherein the domain mapping service is operable to respond to a request from the scan engine by sending the network information to a source of the request.
Claim 66
Dependent Claim
33 words
The system of claim 52 , wherein the priority engine is further operable to: monitor a processor utilization; and disable the particular analysis task if the processor utilization exceeds a first defined threshold.
Claim 67
Dependent Claim
33 words
The system of claim 52 , wherein the priority engine is further operable to: monitor a processor utilization; and disable the particular analysis task if the processor utilization exceeds a first defined threshold.
Claim 68
Dependent Claim
29 words
The system of claim 62 , wherein the priority engine is further operable to re-enable the particular analysis task if the processor utilization drops below a second defined threshold.
Claim 69
Dependent Claim
32 words
The system of claim 52 , wherein the priority engine is further operable to: monitor memory utilization; and disable the particular analysis task if the memory utilization exceeds a third defined threshold.
Claim 70
Independent Claim
82 words
A system for adaptive network security comprising: software embodied in system-readable storage and operable to: direct, by a device coupled to a network, a request onto the network; assess a response to the request to discover network information associated with determining at least one potential network vulnerability; and prioritize a plurality of analysis tasks based upon the network information, the plurality of analysis tasks to be performed on network data traffic which is monitored in order to identify attacks upon the network.
Claim 71
Independent Claim
82 words
A system for adaptive network security comprising: software embodied in system-readable storage and operable to: direct, by a device coupled to a network, a request onto the network; assess a response to the request to discover network information associated with determining at least one potential network vulnerability; and prioritize a plurality of analysis tasks based upon the network information, the plurality of analysis tasks to be performed on network data traffic which is monitored in order to identify attacks upon the network.
Claim 72
Dependent Claim
21 words
The system of claim 66 , wherein the software is further operable to scan a plurality of devices on the network.
Claim 73
Dependent Claim
28 words
The system of claim 66 , wherein the software is further operable to disable a particular analysis task based upon an assigned priority of the particular analysis task.
Claim 74
Dependent Claim
31 words
The system of claim 68 , wherein the software is further operable to: monitor a processor utilization; and perform the disabling step if the processor utilization exceeds a first defined threshold.
Claim 75
Dependent Claim
28 words
The system of claim 69 , wherein the software is further operable to re-enable the particular analysis task if the processor utilization drops below a second defined threshold.
Claim 76
Dependent Claim
30 words
The system of claim 68 , wherein the software is further operable to: monitor memory utilization; and perform the disabling step if the memory utilization exceeds a third defined threshold.
Claim 77
Dependent Claim
28 words
The system of claim 71 , wherein the software is further operable to re-enable the particular analysis task if the memory utilization drops below a fourth defined threshold.
Claim 78
Dependent Claim
44 words
The system of claim 66 , wherein the software is further operable to: determine a probable success of a particular attack upon the network based upon the network information; and assign a priority to the particular analysis task intended to detect the particular attack.
Claim 79
Dependent Claim
27 words
The system of claim 66 , wherein network information comprises: devices coupled to the network; operating systems running on the devices; and services available on the devices.
Claim 80
Dependent Claim
28 words
The system of claim 74 , wherein the software is further operable to identify potential vulnerabilities of a device coupled to the network based upon the network information.
Claim 81
Dependent Claim
26 words
The system of claim 75 , wherein the software is further operable to confirm an identified potential vulnerability through an active exploit of the potential vulnerability.
Claim 82
Dependent Claim
21 words
The system of claim 66 , wherein the software is further operable to maintain the network information in a network map.
Claim 83
Dependent Claim
15 words
The system of claim 66 , wherein the plurality of analysis tasks includes checksum verification.
Claim 84
Dependent Claim
16 words
The system of claim 66 , wherein the plurality of analysis tasks includes IP fragment reassembly.
Claim 85
Dependent Claim
16 words
The system of claim 66 , wherein the plurality of analysis tasks include TCP stream reassembly.
Claim 86
Dependent Claim
15 words
The system of claim 66 , wherein the plurality of analysis tasks includes timeout calculations.
Claim 87
Dependent Claim
29 words
The system of claim 66 , wherein the plurality of analysis tasks includes a plurality of comparisons between the monitored network data traffic and a plurality of attack signatures.
Claim 88
Dependent Claim
18 words
The system of claim 82 , wherein the software is further operable to disable a particular attack signature.
Claim 89
Dependent Claim
32 words
The system of claim 66 , wherein the software is further operable to: repeat the directing step to obtain updated network information; and repeat the prioritizing step using the updated network information.
Claim 90
Dependent Claim
58 words
The system of claim 66 , wherein the software is further operable to send a query to a domain mapping service, wherein the domain mapping service maintains a compilation of network information, and further wherein the domain mapping service is operable to respond to such a request by sending the network information to a source of the request.
Claim 91
Dependent Claim
40 words
The system of claim 66 , wherein the software is further operable to: prioritize a plurality of system services based upon the network information; and disable a particular system service based upon an assigned priority of the particular system service.
Claim 92
Dependent Claim
13 words
The system of claim 66 , wherein the device comprises a scan engine.
Claim 93
Independent Claim
124 words
A system for adaptive network security comprising: software embodied in system-readable storage and operable to: direct, by a device coupled to a network, a request onto the network; assess a response to the request to discover network information associated with determining at least one potential network vulnerability; prioritize a plurality of protocol analyses to be performed on network data traffic which is monitored, the protocol analyses for identifying attacks upon the network; monitor a processor utilization of processor resources; monitor memory utilization of memory resources; disable a particular protocol analysis based upon an assigned priority if the processor utilization exceeds a first defined threshold; and disable a particular protocol analysis based upon an assigned priority if the memory utilization exceeds a third defined threshold.
Claim 94
Independent Claim
124 words
A system for adaptive network security comprising: software embodied in system-readable storage and operable to: direct, by a device coupled to a network, a request onto the network; assess a response to the request to discover network information associated with determining at least one potential network vulnerability; prioritize a plurality of protocol analyses to be performed on network data traffic which is monitored, the protocol analyses for identifying attacks upon the network; monitor a processor utilization of processor resources; monitor memory utilization of memory resources; disable a particular protocol analysis based upon an assigned priority if the processor utilization exceeds a first defined threshold; and disable a particular protocol analysis based upon an assigned priority if the memory utilization exceeds a third defined threshold.
Claim 95
Dependent Claim
21 words
The system of claim 88 , wherein the software is further operable to scan a plurality of devices on the network.
Claim 96
Dependent Claim
28 words
The system of claim 88 , wherein the network information comprises: devices coupled to the network; operating systems running on the devices; and services available on the devices.
Claim 97
Dependent Claim
18 words
The system of claim 90 , wherein the software is further operable to confirm each identified potential vulnerability.
Claim 98
Dependent Claim
22 words
The system of claim 88 , wherein the software is further operable to identify potential vulnerabilities of devices coupled to the network.
Claim 99
Dependent Claim
28 words
The system of claim 88 , wherein the software is further operable to re-enable the particular analysis task if the processor utilization drops below a second defined threshold.
Claim 100
Dependent Claim
28 words
The system of claim 88 , wherein the software is further operable to re-enable the particular analysis task if the memory utilization drops below a fourth defined threshold.
Claim 101
Dependent Claim
15 words
The system of claim 88 , wherein the plurality of protocol analyses includes checksum verification.
Claim 102
Dependent Claim
16 words
The system of claim 88 , wherein the plurality of protocol analyses includes IP fragment reassembly.
Claim 103
Dependent Claim
16 words
The system of claim 88 , wherein the plurality of protocol analyses includes TCP stream reassembly.
Claim 104
Dependent Claim
15 words
The system of claim 88 , wherein the plurality of protocol analyses includes timeout calculations.
Claim 105
Dependent Claim
32 words
The system of claim 88 , wherein the software is further operable to: repeat the directing step to obtain updated network information; and repeat the prioritizing step using the updated network information.
Claim 106
Dependent Claim
58 words
The system of claim 88 , wherein the software is further operable to send a query to a domain mapping service, wherein the domain mapping service maintains a compilation of network information, and further wherein the domain mapping service is operable to respond to such a request by sending the network information to a source of the request.
Claim 107
Dependent Claim
40 words
The system of claim 88 , wherein the software is further operable to: prioritize a plurality of system services based upon the network information; and disable a particular system service based upon an assigned priority of the particular system service.
Claim 108
Dependent Claim
13 words
The system of claim 88 , wherein the device comprises a scan engine.
Claim 109
Independent Claim
126 words
A system for adaptive network security comprising: software embodied in system-readable storage and operable to: direct, by a device coupled to a network, a request onto the network; assess a response to the request to discover network information associated with determining at least one potential network vulnerability; prioritize a plurality of comparisons between network data traffic which is monitored and a plurality of attack signatures, the attack signatures for identifying attacks upon the network; monitor a processor utilization of processor resources; monitor memory utilization of memory resources; disable a particular attack signature based upon an assigned priority if the processor utilization exceeds a first defined threshold; and disable a particular attack signature based upon an assigned priority if the memory utilization exceeds a third defined threshold.
Claim 110
Independent Claim
126 words
A system for adaptive network security comprising: software embodied in system-readable storage and operable to: direct, by a device coupled to a network, a request onto the network; assess a response to the request to discover network information associated with determining at least one potential network vulnerability; prioritize a plurality of comparisons between network data traffic which is monitored and a plurality of attack signatures, the attack signatures for identifying attacks upon the network; monitor a processor utilization of processor resources; monitor memory utilization of memory resources; disable a particular attack signature based upon an assigned priority if the processor utilization exceeds a first defined threshold; and disable a particular attack signature based upon an assigned priority if the memory utilization exceeds a third defined threshold.
Claim 111
Dependent Claim
21 words
The system of claim 103 , wherein the software is further operable to scan a plurality of devices on the network.
Claim 112
Dependent Claim
43 words
The system of claim 103 , wherein the software is further operable to: determine a likelihood of success of a potential attack based upon the network information; and prioritize an attack signature of the potential attack according to the determined likelihood of success.
Claim 113
Dependent Claim
27 words
The system of claim 103 , wherein network information comprises: devices coupled to the network; operating systems running on the devices; and services available on the devices.
Claim 114
Dependent Claim
22 words
The system of claim 103 , wherein the software is further operable to identify potential vulnerabilities of devices coupled to the network.
Claim 115
Dependent Claim
18 words
The system of claim 103 , wherein the software is further operable to confirm an identified potential vulnerability.
Claim 116
Dependent Claim
28 words
The system of claim 103 , wherein the software is further operable to re-enable the particular attack signature if the processor utilization drops below a second defined threshold.
Claim 117
Dependent Claim
28 words
The system of claim 103 , wherein the software is further operable to re-enable the particular attack signature if the memory utilization drops below a fourth defined threshold.
Claim 118
Dependent Claim
21 words
The system of claim 103 , wherein the software is further operable to maintain the network information in a network map.
Claim 119
Dependent Claim
32 words
The system of claim 103 , wherein the software is further operable to: repeat the directing step to obtain updated network information; and repeat the prioritizing step using the updated network information.
Claim 120
Dependent Claim
58 words
The system of claim 103 , wherein the software is further operable to send a query to a domain mapping service, wherein the domain mapping service maintains a compilation of network information, and further wherein the domain mapping service is operable to respond to such a request by sending the network information to a source of the request.
Claim 121
Dependent Claim
40 words
The system of claim 103 , wherein the software is further operable to: prioritize a plurality of system services based upon the network information; and disable a particular system service based upon an assigned priority of the particular system service.
Claim 122
Dependent Claim
13 words
The system of claim 103 , wherein the device comprises a scan engine.
Claim 123
Independent Claim
80 words
A system for adaptive network security comprising: means for directing, by a device coupled to a network, a request onto the network; means for assessing a response to the request to discover network information associated with determining at least one potential network vulnerability; and means for prioritizing a plurality of analysis tasks based upon the network information, the plurality of analysis tasks to be performed on network data traffic which is monitored in order to identify attacks upon the network.
Claim 124
Independent Claim
80 words
A system for adaptive network security comprising: means for directing, by a device coupled to a network, a request onto the network; means for assessing a response to the request to discover network information associated with determining at least one potential network vulnerability; and means for prioritizing a plurality of analysis tasks based upon the network information, the plurality of analysis tasks to be performed on network data traffic which is monitored in order to identify attacks upon the network.
References Cited (Backward Citations)
US5101402A
Cited
US5032979A
Cited
US5278901A
Cited
US5341422A
Cited
US5621889A
Cited
US5448724A
Cited
US5414833A
Cited
US5606668A
Cited
US5557742A
Cited
US5524238A
Cited
US5488715A
Cited
US5699513A
Cited
US5699403A
Cited
US5793763A
Cited
US5826014A
Cited
US5931946A
Cited
US5798706A
Cited
US5892903A
Cited
US5991881A
Cited
US5796942A
Cited
US5805801A
Cited
US5919257A
Cited
US6088804A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-10-08 | 2005-04-09 | 2005-10-09 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-10-08 | 2009-04-09 | 2009-10-09 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-10-08 | 2013-04-09 | 2013-10-09 | $7700.00 | Window Closed / Lapsed |