Patent ID: 9712557
Date: 2017-07-18
CPC Classifications: H04L

Claim:
1. A data processing system comprising: a sensor computer that is coupled to, co-located with, and on a same LAN segment as a compromised computer, the compromised computer comprising at least one malware item that is configured to direct unauthorized network activity toward one or more enterprise networks or enterprise computers, wherein the compromised computer is coupled to a firewall that is configured to control ingress of packets to the compromised computer and the sensor computer from a network, wherein the one or more enterprise networks or enterprise computers are coupled to the network through an enterprise firewall, and the compromised computer is logically between one or more attacker computers and the one or more enterprise networks or enterprise computers; a security control computer that is coupled to the sensor computer; one or more non-transitory data storage media in the security control computer storing security logic comprising one or more sequences of instructions which when executed cause the security control computer to perform: