Patent ID: 7941854

Claim:
A method for managing an intrusion on a computer, the method comprising: visually representing on a computer display a known intrusion path of a known intrusion of hardware of a computer such that the known intrusion path is visually depicted on a display of the computer as a graphical representation of all hardware in a hardware topology of the computer that was previously infected by the known intrusion, wherein the graphical representation of the known intrusion path includes a scripted response that is visually displayed in association with at least one of the hardware displayed in the known intrusion path graphical representation; visually representing on the computer display a current intrusion path of a current intrusion of the computer such that the current intrusion path is visually depicted on the computer display using a graphical representation of all hardware in the hardware topology of the computer that is currently infected by the current intrusion; matching the current intrusion to the known intrusion according to at least one common node in the visual graphical representations of the displayed graphical intrusion paths of the known intrusion and the current intrusion; and responsive to matching the known intrusion and the current intrusion, initiating the scripted response, wherein the scripted response is capable of responding to the current intrusion.