Patent ID: 7523493

Claim:
In a distributed network of interconnected computing devices, a network virus monitor, comprising: a virus sensor operable in a number of modes arranged to detect a computer virus in the network such that the bandwidth of the network is minimally affected in a first mode in that original data packets continue to their destination after they are copied creating copied data packets which are analyzed for the computer virus, and wherein when the virus sensor detects the computer virus, the virus sensor switches to a second mode, wherein original data packets are analyzed and a subset of data packets determined to be infected or suspected of being infected are not returned to the network and wherein the virus monitor is able to automatically collect network environment data and assign an IP address to itself, and wherein the virus monitor automatically locates a controller in the network and registers itself with the controller, from where the virus monitor receives a rule set and an outbreak prevention policy (OPP); and a traffic controller coupled to the virus sensor and the network arranged to select certain data packets wherein the selected data packets are forwarded to the virus sensor.