Unified monitoring and detection of intrusion attacks in an electronic system

• US 7,272,855 B1
• Filed: 06/07/2000
• Issued: 09/18/2007
• Est. Priority Date: 06/08/1999
• Status: Expired due to Fees

• Current Assignee: Columbia Innovation Enterprise, Trustees Of Columbia University In The City Of New York (Columbia University)
• Original Assignee: Trustees Of Columbia University In The City Of New York (Columbia University)
• Inventors: Florissi, Danilo, Dailianas, Apostolos, Yemeni, Yechiam
• Primary Examiner(s): Sheikh; Ayaz
• Assistant Examiner(s): LAFORGIA, CHRISTIAN A
• Application Number:
  US09/589,500
• Time in Patent Office: 2,659 Days
• Field of Search: 705/26, 705/38, 705/40, 455/410, 379/189, 379/192, 713/193, 713/153, 713/182, 726/27, 726/23
• US Class Current: 726/23
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 63/1458 Denial of Service

Abstract

An inventive monitor monitors accesses to a resource in an electronic system, such that access to the resource is based on payments in electronic security value units. The monitor detects patterns of payments for the resource in electronic security value units, and compares the patterns of payments to predetermined patterns of payment. In addition, the monitor determines a difference in the compared patterns of payments to the predetermined patterns of payment, such that when the difference is greater than a predetermined threshold difference, an attack is indicated.

Claims

1. A method for detecting denial of service attacks on a resource in an electronic system, wherein access to the resource is based on payments in electronic security value units, comprising:

detecting patterns of payments for the resource over a plurality of users in electronic security value units;

comparing the patterns of payments to predetermined patterns of payment; and

indicating a denial of service attack based upon the comparison of the patterns of payments to the predetermined patterns of payment.

2. The method of claim 1, wherein the comparing comprises determining a difference in the detected patterns of payments and the predetermined patterns of payment.

3. The method of claim 1, wherein the detected patterns of payments are payments incoming to the resource.

4. The method of claim 1, wherein the detected patterns of payments are detected irrespective of source.

5. The method of claim 1, wherein the plurality of users is all users.

6. The method of claim 1, wherein the resource is a set of resources.

7. The method of claim 1, wherein the resource is associated with a price.

8. The method of claim 1, wherein at least one of the plurality of users is associated with a budget.

9. The method of claim 1, wherein the resource is associated with a price and at least one of the plurality of users is associated with a budget.

10. The method of claim 9, further comprising deducting the price from a budget of an accessing user of the plurality of users in response to receiving a payment from the accessing user.

11. The method of claim 10, further comprising detecting that a budget is depleted and inhibiting access to the resource by a user associated with the depleted budget.