SYSTEM SECURITY APPROACHES UTILIZING A HIERARCHICAL MEMORY SYSTEM
First Claim
1. A method for monitoring a plurality of data units, comprising:
- based on the content of said plurality of said data units, retrieving a plurality of states and dependency relationships among said plurality of said states that correspond to a plurality of unwanted patterns from a hierarchical memory system, wherein said plurality of said states and said dependency relationships are distributed among a plurality of memory types in said hierarchical memory system according to a frequency of accessing said plurality of said states calculated by comparing a plurality of test data patterns with said plurality of said states in a sequence specified by said dependency relationships; and
identifying a set of suspected data units by comparing said plurality of said data units with said plurality of said states in a sequence specified by said dependency relationships, wherein the content of said set of said suspected data units collectively matches any of said plurality of said unwanted patterns.
2 Assignments
0 Petitions
Accused Products
Abstract
A method and system for ensuring system security is disclosed. Based on the content of the data units the method and system monitor, the method and system retrieve the states and the dependency relationships among these states that are representative of unwanted patterns. The method and system store the states and the dependency relationships mentioned above in different types of memories according to the frequency of accessing the states. The frequency is calculated by comparing a number of test data patterns with the states in a sequence specified by the dependency relationships. The method and system further identify a set of suspected data units by comparing the data units with the retrieved states in a sequence specified by the retrieved dependency relationships, wherein the content of the set of the suspected data units collectively matches any of the unwanted patterns.
-
Citations
28 Claims
-
1. A method for monitoring a plurality of data units, comprising:
-
based on the content of said plurality of said data units, retrieving a plurality of states and dependency relationships among said plurality of said states that correspond to a plurality of unwanted patterns from a hierarchical memory system, wherein said plurality of said states and said dependency relationships are distributed among a plurality of memory types in said hierarchical memory system according to a frequency of accessing said plurality of said states calculated by comparing a plurality of test data patterns with said plurality of said states in a sequence specified by said dependency relationships; and
identifying a set of suspected data units by comparing said plurality of said data units with said plurality of said states in a sequence specified by said dependency relationships, wherein the content of said set of said suspected data units collectively matches any of said plurality of said unwanted patterns. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A system for monitoring a plurality of data units, comprising:
-
a dispatch means for, based on the content of said plurality of said data units, retrieving a plurality of states and dependency relationships among said plurality of said states that correspond to a plurality of unwanted patterns from a hierarchical memory system, wherein said plurality of said states and said dependency relationships are distributed among a plurality of memory types in said hierarchical memory system according to a frequency of accessing said plurality of said states calculated by comparing a plurality of test data patterns with said plurality of said states in a sequence specified by said dependency relationships; and
a content inspection means for identifying a set of suspected data units by comparing said plurality of said data units with said plurality of said states in a sequence specified by said dependency relationships, wherein the content of said set of said suspected data units collectively matches any of said plurality of said unwanted patterns. - View Dependent Claims (9, 10, 11, 12, 13, 14)
-
-
15. A system for monitoring a plurality of data units, comprising:
-
a dispatch engine;
a hierarchical memory system;
a content inspection engine, coupled to said distribution engine and said hierarchical memory system, wherein;
said dispatch engine, based on the content of said plurality of said data units, retrieves a plurality of states and dependency relationships among said plurality of said states that correspond to a plurality of unwanted patterns from said hierarchical memory system, wherein said dispatch engine has caused the distribution of said plurality of said states and said dependency relationships among a plurality of memory types in said hierarchical memory system according to a frequency of accessing said plurality of said states calculated by an application, which compares a plurality of test data patterns with said plurality of said states in a sequence specified by said dependency relationships; and
said content inspection engine identifies a set of suspected data units by comparing said plurality of said data units with said plurality of said states in a sequence specified by said dependency relationships, wherein the content of said set of said suspected data units collectively matches any of said plurality of said unwanted patterns. - View Dependent Claims (16, 17, 18, 19, 20, 21)
-
-
22. A system for monitoring a plurality of data units, comprising:
-
a bus;
a processor, coupled to said bus;
a hierarchical memory system, coupled to said bus; and
a content inspection co-processor coupled to said bus and to said hierarchical memory system, wherein said content inspection co-processor further comprising;
a dispatch engine;
a content inspection engine, coupled to said distribution engine, wherein;
said dispatch engine, based on the content of said plurality of said data units, retrieves a plurality of states and dependency relationships among said plurality of said states from said hierarchical memory system, which collectively represent a plurality of unwanted patterns, wherein said plurality of said states and said dependency relationships were distributed among a plurality of memory types in said hierarchical memory system by said dispatch engine according to a frequency of accessing said plurality of said states calculated by an application, which when executed upon said processor, compares a plurality of test data patterns with said plurality of said states in a sequence specified by said dependency relationships; and
said content inspection engine identifies a set of suspected data units by comparing said plurality of said data units with said plurality of said states in a sequence specified by said dependency relationships, wherein the content of said set of said suspected data units collectively matches any of said plurality of said unwanted patterns. - View Dependent Claims (23, 24, 25, 26, 27, 28)
-
Specification