Method And Apparatus To Prevent Large-Scale Internet Attacks

Description :

The invention defines a new technique of automatically determining an unknown attack. The embodiments describe detecting attacks by worms, scanning, denial of service (distributed or otherwise), viruses and/or spam. An aspect of this system defines scalable data reduction techniques to detect the attacks referred to above.  These scalable techniques enable the monitoring of network data for any desired size network apparatus that can be implemented at various speeds ranging from the highest speed links (currently at 40 Gbps) to lower speed local links within local networks.

Case No: SD2004-151
Keywords: Internet security, network security
Inquiries To:  invent@ucsd.edu