Patent ID: 8640239

Claim:
A networked computer system comprising: a plurality of systems that each include at least one processor; a plurality of networks interconnecting the plurality of systems; a distributed virtual switch fabric that provides a virtual view of the plurality of networks and the plurality of systems; and a network intrusion detection system coupled to the distributed virtual switch fabric, the network intrusion detection mechanism comprising: a plurality of attack signatures that specify characteristics of network intrusions; an interface to the distributed virtual switch fabric that allows querying the distributed virtual switch fabric to determine from the virtual view, network topology and configuration of the networked computer system, wherein the network intrusion detection mechanism detects a change to the plurality of systems, queries the distributed virtual switch fabric to determine if the change is reflected in the virtual view of the plurality of networks and the plurality of systems, and when the change is reflected in the virtual view, the network intrusion detection mechanism autonomically changes the network topology and configuration in the network intrusion detection mechanism without input from a human system administrator; and a plurality of service actions that each may be performed automatically by the network intrusion detection mechanism without input from a human system administrator when a network intrusion that matches at least one of the plurality of attack signatures is detected by the network intrusion detection system.