Patent ID: 8763121
Filing Date: 2014-06-24
Classification: G06F,H04L

Abstract:
1. A method of identifying a potential attack in network traffic that includes payload data transmitted to a host entity in a network, the method including: monitoring and checking said traffic on route to said host entity for intrusion attacks; performing a first data-check on one or more data bytes of the payload data at the host entity; performing a second data-check, equivalent to the first data-check, on data of the network equivalent to the one or more bytes of payload data; and comparing the results of the first and second data-checks to determine if there is a mismatch, any mismatch being an indication that said step of monitoring and checking said traffic on route to said host entity for intrusion attacks is unreliable, wherein the first data-check is performed by a Host Intrusion Protection System (HIPS) and the second data-check is performed by an Intrusion Detection System/Intrusion Protection System (IDS/IPS).