Patent ID: 7409714
Filing Date: 2008-08-05
Classification: G06F,H04L

Abstract:
1. A method of forming a virtual intrusion detection system, comprising: positioning a set of sensors in a network environment, each sensor supporting multiple logical traffic paths; and providing a set of sensor management systems corresponding to said set of sensors, said set of sensor management systems enforcing a set of virtual intrusion detection systems, wherein each virtual intrusion detection system corresponds to a predetermined logical traffic path through said set of sensors, each virtual intrusion detection system providing sensor traffic information solely to authorized parties; wherein each of the logical traffic paths is associated with a subscriber; wherein virtual intrusion detection services are provided differently for each of the subscribers based on subscriber input; wherein resources of the virtual intrusion detection systems are each allocated based on an IP address range that is associated with one of the subscribers; wherein each of the sensor management systems includes a virtual intrusion detection system provisioning module to perform local virtual intrusion detection system operations as coordinated by the virtual intrusion detection system provisioning module, the local virtual intrusion detection system operations providing intrusion protection for multiple subscribers utilizing one integrated platform.