Patent ID: 7870611

Claim:
A network detection system, comprising: a router that receives traffic comprised of information packets from a first network device and is configured to direct the information packets to a protected network device; an activity monitoring system coupled to the router and configured to receive the information packets from the router, the activity monitoring system comprising a detector module and an analyzer module, the detector module configured to monitor the information packets received from the router destined for the protected network device and to determine whether the traffic comprised of the information packets is abnormal in accordance with a first predetermined criteria; and the analyzer module configured to receive subsequent traffic directed to the protected network device based on the prior information packets detected by the detector module as being abnormal, and to analyze the information packets of the subsequent traffic to determine whether the information packets satisfy a second predetermined criteria, the activity monitoring system further configured to inhibit the information packets that are determined to satisfy the second predetermined criteria from reaching the protected network device.