Patent ID: 7370359
Filing Date: 2008-05-06
Classification: H04L

Abstract:
1. A security system for a computer network, the network having a plurality of devices connected thereto, at least some of the devices generating event messages when the device is under an attack, each event message having an associated event, the security system comprising: (a) a security subsystem connected to at least the devices in the network that generate an event message when under attack, the security subsystem including: (i) a collection engine which collects the event messages from the devices, and (ii) an event analyzer which analyzes the event messages to determine if any of the associated events exceed any predetermined thresholds; (b) a master security system which receives the associated events that exceed any predetermined thresholds; and (c) a first communication medium connected between the security subsystem and the master security system, the master security system receiving the associated events through the first communication medium.