Method and apparatus for integrated network security alert information retrieval
Number of patents in Portfolio can not be more than 2000
United States of America Patent
Stats
-
Mar 27, 2012
Issued Date -
N/A
app pub date -
Dec 23, 2005
filing date -
Dec 23, 2005
priority date (Note) -
In Force
status (Latency Note)
Importance
Abstract
A method and apparatus are disclosed whereby databases containing information related to an IP address are accessed directly from within a threat management software tool. When an alert is generated, an element within that alert, such as an IP address, is linked to one or more databases internal to an organization containing information related to the location or identity of a user or computer at a particular IP address. If no matches for that element are found in internal databases, a search of a registry of IP addresses is conducted. Finally, if the searches of internal and external databases are inadequate, an active scan of the device at that particular IP address or a router associated with that IP address is conducted. In this way, information related to a security threat is easily and efficiently obtained to enable a security analyst to better isolate that threat.
First Claim
Family
International Classification(s)
Cited Art Landscape
Patent Citation Ranking
Advertisement
Advertisement
Advertisement
Recipient Email Address
Recipient Email Address
Comment
Recipient Email Address
Add to Portfolio(s)
To add this patent to one, or more, of your portfolios, simply click the add button.
This Patent is in these Portfolios:
Add to additional portfolios:
Last Refreshed On:
Changes done successfully