Patent ID: 8621229

Claim:
A computer program product comprising a computer useable storage memory having readable program code embodied in the computer useable storage memory, the computer program product includes at least one component to: process a login to an application only after capturing a plurality of configuration data of a computer performing the login; recall the plurality of configuration data from a memory; and match at least portions of the recalled plurality of configuration data to corresponding portions of subsequent captured configuration data of a suspect computer which is a possible attacker of the network, to establish whether the recalled plurality of configuration data and the subsequent captured configuration data are both derived from the computer, wherein when the matching occurs, the computer is verified as possibly attacking the network and, wherein the plurality of configuration data comprises at least: (i) computer configuration information; (ii) Ethernet information associated with one or more Ethernet adapters; (iii) registry information; (iv) hardware configuration information; (v) software configuration information comprising a software component identification, a browser configuration, a software component version, a driver version, an application identification and directory structure; and (vi) operating system product information and associated libraries.