Patent ID: 8650646
Filing Date: 2014-02-11
Classification: G06F,H04L

Abstract:
1. A computer-implemented system for security processing of a network data stream, the system comprising: a server; a plurality of client computers connected to the server over a network; at least one network intrusion detection system for processing a network data stream positioned between the server and the clients; at least one threat-related statistics collection system for collecting statistics of detected threats located between the server and the clients; a statistics database storing the threat-related statistics, including threat parameters, the database accessible by the statistics collection system; a unit for determining areas of the data stream to be checked connected to the statistics database, the areas representing portions of the data stream, wherein the threat-related statistics are stored in the database and the unit for determining areas of the data stream to be checked calculates the checked areas based on the threat-related statistics from the database, wherein, based on the threat-related statistics, the intrusion detection system (a) periodically changes a size of the checked areas of the data stream, or (b) changes the size of the checked areas of the data stream based on new detected threats, or (c) periodically changes a location of the checked areas of the data stream, and wherein a size of the checked area of the data stream is changed based on a threat age.