Patent ID: 8893276

Claim:
A system for determining a performance level of a software filter in an intrusion prevention system (IPS filter), the system comprising: a server computer, comprising a first processor, and a first memory device having stored thereon computer readable instruction for execution by the first processor, causing the first processor to: collect test confidence attributes of the IPS filter characterizing a test performance of the IPS filter; determine a base confidence score of the IPS filter, characterizing the test performance of the IPS filter, based on the collected test confidence attributes; a remote server computer at a remote location, the remote server computer having a second processor and a second memory device having stored thereon computer readable instruction for execution by the second processor, causing the second processor to: deploy the IPS filter at the remote location, the IPS filter being configured to process a stream of packets; collect local confidence attributes of the IPS filter characterizing a local performance of the IPS filter at the remote location; determining a local confidence score of the IPS filter, characterizing the local performance of the IPS filter, based on the collected local confidence attributes; and one of the server computer or the remote server computer being configured to determine a global confidence score of the IPS filter, indicating the performance level of the IPS filter, based on the base confidence score and the local confidence score of the IPS filter.