专利内容由知识产权出版社提供
专利名称:Identifying applications for intrusion
detection systems
发明人:Bryan Burns,Siying Yang,Julien Sobrier申请号:US13651875申请日:20121015公开号:US09712490B1公开日:20170718
专利附图:
摘要:An intrusion detection system (“IDS”) device is described that includes a flowanalysis module to receive a first packet flow from a client and to receive a secondpacket flow from a server. The IDS includes a forwarding component to send the first
packet flow to the server and the second packet flow to the client and a statefulinspection engine to apply one or more sets of patterns to the first packet flow todetermine whether the first packet flow represents a network attack. The IDS alsoincludes an application identification module to perform an initial identification of a typeof software application and communication protocol associated with the first packet flowand to reevaluate the identification of the type of software application and protocolaccording to the second packet flow. The IDS may help eliminate false positive and falsenegative attack identifications.
申请人:Juniper Networks, Inc.
地址:Sunnyvale CA US
国籍:US
代理机构:Shumaker & Sieffert, P.A.
更多信息请下载全文后查看