Patent ID: 7624445
Filing Date: 2009-11-24
Classification: H04L

Abstract:
1. A method in a network data processing system for responding to threat conditions, the method comprising computer implemented steps of: detecting a threat condition within the network data processing system; responsive to detecting the threat condition, dynamically reconfiguring at least one routing device within the network data processing system to change routing information and subnet information for the at least one routing device to isolate an infected data processing system within the network data processing system, wherein changing the subnet information further comprises separating a network associated with the network data processing system into two or more smaller networks connected by routing devices to form two or more subnets, and wherein isolating the infected data processing system includes placing the infected data processing system in a different subnet than a non-infected data processing system; sending instructions to the at least one routing device to advertise the changed subnet information, wherein the changed subnet information includes a new subnet mask and router for the infected data processing system, and wherein the new subnet mask and router does not affect the internet protocol address of either the infected data processing system or the non-infected data processing system; and sending policies and filters to the at least one routing device, wherein the policies and filters limit access to external networks and other subnets by the infected data processing system by filtering data packets received in traffic from the infected data processing system and processing the data packets based on at least one policy.