Patent ID: 7954159
Filing Date: 2011-05-31
Classification: H04L

Abstract:
1. A security system for a computer network, the network having a plurality of devices connected thereto, at least some of the devices generating event messages when the device is under an attack, each event message having an associated event, the security system comprising: (a) a security subsystem connected to at least the devices in the network that generate an event message when under attack, the security subsystem generating a plurality of views, each view including a subset of the event messages generated by the devices, the security subsystem including an event analyzer which analyzes the event messages across multiple views to determine if any of the associated events exceeds a predetermined threshold; (b) a master security system which receives the associated events which exceed the predetermined threshold from the security subsystem; and (c) a first communication medium connected between the security subsystem and the master security system, the master security system receiving the associated events through the first communication medium.