Patent ID: 8321937
Filing Date: 2012-11-27
Classification: G06F

Abstract:
1. A method for determining a performance level of a software filter in an intrusion prevention/detection system (IPS filter), the method comprising: at a server computer, employing at least one processor for collecting test confidence attributes of the IPS filter characterizing a test performance of the IPS filter; determining a base confidence score of the IPS filter, characterizing the test performance of the IPS filter, based on the collected test confidence attributes; deploying the IPS filter to a remote location; at the remote location, employing at least one processor for collecting local confidence attributes of the IPS filter characterizing a local performance of the IPS filter at the remote location; determining a local confidence score of the IPS filter, characterizing the local performance of the IPS filter, based on the collected local confidence attributes; and determining a global confidence score of the IPS filter, indicating the performance level of the IPS filter, based on the base confidence score and the local confidence score of the IPS filter; wherein the IPS filter is configured to process a stream of packets.