发明名称 REAL-TIME AWARENESS FOR A COMPUTER NETWORK
摘要 <p>A computer system, device, computer software, and/or method performed by a computer system, is provided for determining a user name likely to be associated with an attack, a configuration, or a vulnerability. First data is obtained which associates user names with individual IP addresses onto which the user names were logged in. Second data is obtained which associates attacks, configurations, or vulnerabilities with individual IP addresses on which the attacks occurred or on which the configurations or vulnerabilities exist. The user names from the first data are associated with the attacks, configurations or vulnerabilities from the second data based on having the same IP address during a log-in. An individual user name is indicated as being associated with attacks which occurred while the individual user name was logged in or with configurations or vulnerabilities for an IP address onto which the user logs in.</p>
申请公布号 EP2156290(A1) 申请公布日期 2010.02.24
申请号 EP20080743372 申请日期 2008.04.29
申请人 SOURCEFIRE, INC. 发明人 RITTERMANN, BRIAN
分类号 G06F11/00;H04L29/06 主分类号 G06F11/00
代理机构 代理人
主权项
地址
您可能感兴趣的专利