Patent ID: 9300680
Filing Date: 2016-03-29
CPC Classification: H04L

Claim Text:
1. A method of protecting a network from intrusions, the method comprising: detecting, using a computer processor, an intrusion of an offending packet communicated by an offending host coupled to a protected network, wherein the offending host comprises a server computer upon which is executed an operating system and at least one application that originates the offending packet; and in response to detecting the intrusion of the offending packet, returning a blocking instruction to the offending host to initiate an intrusion protection operation on the offending host, wherein the blocking instruction inhibits further origination of offending packets by the application executed upon the offending host, wherein sending the blocking instruction further comprises sending at least a portion of the offending packet back to the offending host with the blocking instruction, wherein sending at least a portion of the offending packet back to the offending host further comprises: encapsulating the portion of the offending data packet into a User Datagram Protocol (UDP) packet and returning the encapsulated portion of the offending data packet to the offending host as a notification packet; or at an Internet Protocol (IP) layer, sending the portion of the offending data packet to the offending host in an Internet Control Message Protocol (ICMP) message that further implements the blocking instruction.