Patent ID: 9015828
Filing Date: 2015-04-21
Classification: G06F,H04L

Abstract:
1. A management system, comprising: a plurality of components within the computer system, wherein the computer system comprises a network interface configured to receive network-traffic data; a plurality of component resource managers, wherein each of the components is controlled by at least one of the plurality of component resource managers; a plurality of component management interfaces, wherein each of the components communicates with at least one of the controlling component resource managers via one of the component management interfaces; a monitoring engine within each of the component resource managers in communication with at least one of the components through one of the component management interfaces, wherein the monitoring engine collects monitoring data corresponding to the network-traffic data; an analysis engine within each of the component resource managers having at least one algorithm responsive to the monitored network-traffic data, wherein the analysis engine classifies network-traffic data communicated through components as one of at least normal and attacking according to an abnormality metric for the network-traffic data, wherein the abnormality metric is based on at least a packet rate, a flow rate, and a number of unsuccessful sessions found in the network-traffic data, and wherein network-traffic data having the abnormality metric in accord with at least one predetermined abnormality distance parameter is classified as attacking; and at least one runtime manager autonomously controlling operation of the components and the component resource managers, wherein the runtime manager routes the network-traffic data according to the anomalous activity classification.