Patent ID: 8595835
Filing Date: 2013-11-26
Classification: G06F,H04L

Abstract:
1. A system to identify network attacks within packets received by a network, the system comprising: an adaptor to route an encrypted packet to a decryption circuit, receive a decrypted packet corresponding to the encrypted packet from the decryption circuit, and transmit the decrypted packet and the encrypted packet to a sensor; the decryption circuit to receive the encrypted packet, decrypt the encrypted packet to form the decrypted packet, and transmit the decrypted packet to the adaptor; and the sensor to inspect the decrypted packet received from the adaptor to determine whether an attack is detected, to inspect the encrypted packet received from the adaptor to determine whether the attack is detected, and to block transmission of the encrypted packet to a destination identified in the encrypted packet when the attack is detected in at least one of the decrypted packet and the encrypted packet, wherein the adaptor is to detect an alert from the sensor, the alert indicating an attack detected within the decrypted packet, the adaptor to transmit a reset message to a sender of the encrypted packet when the attack is detected within the decrypted packet.