Patent ID: 8635696
Filing Date: 2014-01-21
Classification: G06F,H04L

Abstract:
1. A system comprising: a traffic device configured to receive network traffic over a communication network; and a network device in communication with the traffic device, the network device comprises a controller in communication with one or more virtual machines that is configured to (i) receive the network traffic from the traffic device, (ii) monitor a behavior of a first virtual machine of the one or more virtual machines in response to processing of the network traffic within the first virtual machine, (iii) identify at least one anomalous behavior as an unexpected occurrence in the monitored behavior by accelerating activities caused by the network traffic to reduce time for detecting time-delayed malicious traffic, and (iv) determine, based on the identified anomalous behavior, the presence of the time-delayed malicious traffic in the network traffic, wherein the controller accelerating the activities by at least intercepting one or more time-sensitive system calls and modifying one or more responses to the one or more of the system calls so as to accelerate the activities in the first virtual machine caused by the network traffic.