Patent ID: 8381295
Filing Date: 2013-02-19
Classification: G06F,H04L

Abstract:
1. A method of detecting a threat to a computer system in a plurality of collaborating computer systems, the method comprising: receiving, at a first computer system, a first one-way data structure from a collaborating second computer system, the first one-way data structure representing first data relating to a first intrusion attempt detected by an intrusion detection system of the collaborating second computer system such that the first data is hidden in the first one-way data structure; detecting, using an intrusion detection system of the first computer system, a second intrusion attempt; identifying second data relating to the second intrusion attempt that is not to be revealed to another computer system; selecting a second one-way data structure of the first computer system based on at least one characteristic of the second data; storing the second data in the second one-way data structure such that the second data is hidden in the second one-way data structure so as not to be revealed to the other computer system; determining whether the second intrusion attempt correlates with the first intrusion attempt by comparing the first data structure and the second data structure; and indicating that a threat is present if the second intrusion attempt is determined to correlate with the first intrusion attempt.