×

Multi-platform sequence-based anomaly detection wrapper

  • US 6,735,703 B1
  • Filed: 05/08/2000
  • Issued: 05/11/2004
  • Est. Priority Date: 05/08/2000
  • Status: Expired due to Fees
First Claim
Patent Images

1. A method for detecting anomalies in a stream of events, the method comprising:

  • (a) deploying a detection module upon an invocation of an application on a computer system;

    (b) abstracting a stream of events into a generic event format; and

    (c) synchronously determining, using said detection module, whether said stream of generic events includes an anomalous sequence of events;

    wherein (a) comprises activating a system call wrapper in kernel space and associating said system call wrapper with said application.

View all claims
  • 6 Assignments
Timeline View
Assignment View
    ×
    ×