Patent ID: 8595846
Filing Date: 2013-11-26
Classification: H04L

Abstract:
1. A system, comprising: a data stream receiving device receiving a data stream and separating the data stream into a plurality of independent data streams, the data stream including a plurality of packets, each packet including a source address and a destination address; a plurality of detectors, each detector receiving one of the independent data streams, each detector including a detection mechanism for a specific behavior, wherein each of the specific behaviors corresponds to an unwanted activity, each detector creating a record when the specific behavior is identified, the record including the source address and the destination address of the data packet in which the specific behavior was identified, the record further including a metric corresponding to a severity level of the specific behavior; an analysis module combining two of the records when the two records include the same source and destination addresses, the combination including summing the metrics of the two records; and a non-transitory storage medium storing the record.