Method and apparatus for identifying and disabling worms in...

Details Method and apparatus for identifying and disabling worms in... Method and apparatus for identifying and disabling worms in...

H - Electricity

04

L

H04L 9/00 (2006.01)

Patent

CA 2545753

A method and apparatus for enabling a network security service and network security infrastructure to detect, identify, mitigate, neutralize, and disable worms through distributed worm probes that can be linked to centralized monitoring systems for emergency response process is disclosed. The worm probes track packets with destination unreachable errors on a per source IP address basis. In one embodiment, when the number of such errors exceeds a predefined local threshold, e.g., within a predefined local time period at a worm probe, the count of such errors as well as the source IP address will be sent to all other worm probes in the network as an alert. When the number of such errors exceeds a predefined global threshold, e.g., within a predefined global time period, traffic from the endpoint device with the identified source IP address will be blocked to prevent that endpoint device from spreading worms further.

Affiliated with

Also associated with

Rating

Method and apparatus for identifying and disabling worms in... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Method and apparatus for identifying and disabling worms in..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and apparatus for identifying and disabling worms in... will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFCA-PAI-O-2076109