Apparatus for verifying the integrity of computer networks and implementation of countermeasures
First Claim
1. A security system for a computer network, the network having a plurality of devices connected thereto, the security system comprising:
- (a) a security subsystem connected to at least some of the devices in the network, the security subsystem configured to monitor activities of the at least some devices on the network and detect attacks on the at least some devices;
(b) a master system which monitors the integrity of the security subsystem and registers information pertaining to attacks detected by the security subsystem;
(c) a first secure link connected between the security subsystem and the master system, the master system monitoring the integrity of the security subsystem and receiving the information pertaining to the attacks through the first secure link; and
(d) a second secure link connected between the master system and the network which enables data communication from the master system to the network for issuing instructions to the network devices, wherein the instructions are issued if the first secure link is severed or compromised.
1 Assignment
0 Petitions
Accused Products
Abstract
A security system for a computer network that has a plurality of devices connected thereto comprises a security subsystem, a master system and a secure link. The security subsystem is connected to at least some of the devices in the network. The security subsystem is configured to monitor activities of the at least some devices on the network and detect attacks on the at least some devices. The master system monitors the integrity of the security subsystem and registers information pertaining to attacks detected by the security subsystem. The secure link is connected between the security subsystem and the master system. The master system monitors the integrity of the security subsystem and receives the information pertaining to the attacks through the secure link.
-
Citations
16 Claims
-
1. A security system for a computer network, the network having a plurality of devices connected thereto, the security system comprising:
-
(a) a security subsystem connected to at least some of the devices in the network, the security subsystem configured to monitor activities of the at least some devices on the network and detect attacks on the at least some devices; (b) a master system which monitors the integrity of the security subsystem and registers information pertaining to attacks detected by the security subsystem; (c) a first secure link connected between the security subsystem and the master system, the master system monitoring the integrity of the security subsystem and receiving the information pertaining to the attacks through the first secure link; and (d) a second secure link connected between the master system and the network which enables data communication from the master system to the network for issuing instructions to the network devices, wherein the instructions are issued if the first secure link is severed or compromised. - View Dependent Claims (9, 10, 11, 12, 13)
-
-
2. A security system for a computer network, the network having a plurality of devices connected thereto, at least some of the devices having security-related functions, the security system comprising:
-
(a) a security subsystem associated with at least some of the devices in the network which tests the integrity of the security-related functions; (b) a master system which monitors the integrity of the security subsystem and receives and stores results of the integrity testing of the devices having security-related functions; and (c) a secure link connected between the security subsystem and the master system, the master system monitoring the integrity of the security subsystem and receiving the results of the integrity testing of the devices having security-related functions through the secure link, wherein the security subsystem tests the integrity of the security-related functions by generating pseudo-attacks on the devices having security-related functions. - View Dependent Claims (6, 7, 8)
-
-
3. A security system for a computer network, the network having a plurality of devices connected thereto, at least some of the devices having security-related functions, the security system comprising:
-
(a) a security subsystem associated with at least some of the devices in the network which tests the integrity of the security-related functions; (b) a master system which monitors the integrity of the security subsystem and receives and stores results of the integrity testing of the devices having security-related functions; and (c) a secure link connected between the security subsystem and the master system, the master system monitoring the integrity of the security subsystem and receiving the results of the integrity testing of the devices having security-related functions through the secure link, wherein the security subsystem or the master system initiates countermeasures upon detecting that the integrity of a device having security-related functions has been compromised. - View Dependent Claims (4, 5, 14, 15, 16)
-
Specification