Patent ID: 9135438
Filing Date: 2015-09-15
Classification: G06F,H04L

Abstract:
1. A method of detecting a threat to a computer system in a plurality of collaborating computer systems, the method comprising: receiving, at a first computer system, a first bloom filter from a collaborating second computer system, the first bloom filter representing encrypted first data relating to a source of a first intrusion attempt detected by an intrusion detection system of the collaborating second computer system; detecting, using an intrusion detection system of the first computer system, a second intrusion attempt; performing a cryptographic function on second data relating to a source of the second intrusion attempt to produce a second bloom filter; determining whether the second intrusion attempt correlates with the first intrusion attempt by performing a logical AND operation upon the first bloom filter and the second bloom filter; and indicating that a threat is present if the second intrusion attempt is determined to correlate with the first intrusion attempt.