Patent ID: 8566936
Filing Date: 2013-10-22
Classification: H04L

Abstract:
1. A security system for protecting a protected entity using a multi-dimensional protection surface, comprising: a detection module for detecting at least one potential attack against the protected entity in incoming data traffic directed to the protected entity, wherein the detection module further detects a type of each attack tool committing the at least one potential attack; a data repository for storing at least a list of attack tools and for each of the attack tools its operational limitation with respect of each attack that can be performed by the attack tool; a correlation module for generating at least a multi-dimensional protection surface by correlating a plurality of inputs related to the at least one detected attack, wherein the plurality of inputs include at least a first input identifying the at least one detected attack and a second input identifying each attack tool that performs at least one detected attack, wherein the protection multi-dimensional surface includes at least one protection point that defines at least one attack mitigation action to mitigate the at least one detected attack, wherein the attack mitigation action exploits the operational limitation of the attack tool that performs the at least one detected attack; and a mitigation module for executing the at least one attack mitigation action defined in the multi-dimensional protection surface.