Patent ID: 8161540
Filing Date: 2012-04-17
Classification: H04L

Abstract:
1. A computer-implemented method for real-time threat management, comprising: receiving a unified communication (UC) stream, wherein the unified communication (UC) stream comprises one or more streams related to one or more of IP-PBX, video, desktop conferencing, web conferencing, collaboration, presence, unified messaging, instant messaging (IM), voicemail, Interactive Voice Response (IVR), Automatic Call Distribution (ACD) or contact center applications; breaking the unified communication (UC) stream into sub streams; inspecting the sub streams using a plurality of packet processing engines in parallel; annotating the sub streams with meta-data and recommendation events from each of the plurality of packet processing engines; correlating and combining the one or more streams into an annotated unified communication (UC) stream containing the meta-data from each of the plurality of packet processing engines; processing the annotated unified communication (UC) stream using a plurality of engines, wherein the engines include protocol layer engines and UC application layer engines, and wherein the processing comprises making data contained in the annotated unified communication (UC) stream protocol agnostic, and wherein the data contained in the annotated unified communication (UC) stream comprises unified communication (UC) state properties including transport, individual stream sessions and correlated unified communication (UC) stream sessions properties, transactions, system, server, user, endpoint, security profiles, application properties and pointers to past records for matching stream IDs; generating a processed stream; and providing for one of blocking, quarantining, allowing, or redirecting the processed stream.