Patent ID: 11019078

Abstract:
Aspects of the present invention provide an approach for performing network intrusion detection and prevention service (NIDPS) detection on a proxy server in a networked computing environment. In an embodiment, the proxy server has a front end proxy, a NIDPS component, and a back end proxy installed on it. The front end proxy decodes communications sent by external users to content servers over a network that are intercepted by the proxy server and forwards the communications to the NIDPS component. The NIDPS component performs NIDPS detection to detect whether communications comprise a network threat. Communications that have been verified as not comprising a network threat are forwarded to the back end proxy for routing to their destinations. Communications that have been verified as threats are forwarded to a cognitive engine, which initiates an automatic scaling of the NIDPS component in response to indications of network threats from the NIDPS component.