Patent Document ID: 9231917
Application ID: 14508992
Patent Flag: 1

Claim One:
1. An intrusion-protection method implemented in a server comprising at least one processor and at least one memory device for protecting a plurality of computers, the method comprising: identification of intrusion patterns; devising a set of data filters, each data filter corresponding to at least one of said intrusion patterns; formulating a set of descriptors for characterizing said plurality of computers; determining a set of rules, each rule associated with a respective subset of data filters of said set of data filters and with a subset of descriptors of said set of descriptors; executing, for a selected computer, a selected rule of said set of rules using content of a respective subset of descriptors acquired from said selected computer; ascertaining relevance of a specific data filter associated with said selected rule to said selected computer according to a result of said executing; tracking changes made to said selected computer as a result of said executing; determining a monitoring period for said selected computer according to timing of tracked changes; and installing said specific data filter in said selected computer based on said ascertaining.