Patent ID: 8321369

Claim:
An anti-intrusion method for a communication network, said communication network comprising a plurality of network elements, the method comprising the following steps: a) providing a passive monitoring component, a decision making component and an action making component cooperating with said communication network; b) at said passive monitoring component, detecting management information indicative of an attack against at least one network element of said plurality of network elements, processing said management information thus generating infection data, and transmitting said infection data to said decision making component; c) at said decision making component, receiving said infection data, making a decision about an action to be carried out to block said attack, and transmitting said decision to said action making component; and d) at said action making component, based on the decision, instructing said at least one network element to perform said action, wherein said step a) comprises providing said passive monitoring component at each of said plurality of network elements, and wherein said step a) further comprises at least one of the following steps: providing said decision making component at at least two of said plurality of network elements, thus forming a decision making cluster; and providing said action making component at at least another two of said plurality of network elements, thus forming an action making cluster.