Patent ID: 7370356
Filing Date: 2008-05-06
Classification: G06Q,H04L

Abstract:
1. In a computer network having a server and a plurality of network devices connected to the server, a method for protecting the computer network against unauthorized access, the method comprising: providing each authorized device authorized to use the network with an agent configured to report information including: 1) self reported address information about the device to which the agent corresponds; 2) a unique agent identifier (AID) which identifies the device to which the agent corresponds; and 3) neighboring device address information about all neighboring devices connected to a same switch as the device to which the agent corresponds; reporting the information to a security program on the server; and correlating with the security program the reported information to determine if any unauthorized network devices are connected to the network comprising: compiling from the self reported address information reported by the agents a first list containing “self reported” addresses; compiling from the neighboring device address information reported by the agents a second list containing “neighboring” device addresses; and comparing the first list to the second list to determine if there are any discrepancies between the two lists, wherein in the event of a discrepancy, an alert is triggered.