Jon-Michael C Brook

7356585, Apr 8, 2008

Apr 4, 2003

10/407513

Jon-Michael C. Brook - Clearwater FL, US
Matthew C. Rixon - Sarasota FL, US
Randall S. Brooks - Tampa FL, US
Troy Dean Rockwood - Thousand Oaks CA, US

Raytheon Company - Waltham MA

G06F 15/16
G06F 15/173

709224, 709225, 709227, 709236, 709246

A method for vertically extensible intrusion detection for an enterprise comprises receiving a first packet flow from a first node, the first packet flow comprising at least a portion of packet headers received at the first node during a first timeframe and receiving a second packet flow, the second packet flow comprising at least a portion of packet headers received at the second node during a second timeframe. The first and second packet flow are processed to detect an attack on the enterprise system. In response to the attack, an alert message is communicated to a master server, a response message is received from the master server, the response message comprising a signature to impede the attack, and the response message is automatically communicated to the first node and the second node.

7895649, Feb 22, 2011

Apr 4, 2003

10/407700

Jon-Michael C. Brook - Clearwater FL, US
Matthew C. Rixon - Sarasota FL, US
Randall S. Brooks - Tampa FL, US
Troy Dean Rockwood - Thousand Oaks CA, US

Raytheon Company - Waltham MA

G06F 12/14
G06F 12/16

726 22, 726 23, 726 2, 726 3, 726 26, 713189, 713188, 709224, 709225, 709227, 709236, 709246

A method for dynamically generating rules for an enterprise intrusion detection system comprises receiving a packet flow from a sensor. The packet flow is dynamically processed to detect if the packet flow represents an attack on the enterprise system. A response message is automatically generated in response to the attack, the response message comprising a signature to identify the attack. The response message is automatically communicated to a response message file, the response message file comprising at least one response message.

7293238, Nov 6, 2007

Apr 4, 2003

10/407030

Jon-Michael C. Brook - Clearwater FL, US
Matthew C. Rixon - Sarasota FL, US
Randall S. Brooks - Tampa FL, US
Troy Dean Rockwood - Thousand Oaks CA, US

Raytheon Company - Waltham MA

G06F 3/00
G06F 11/30

715736, 715853, 709224, 719318

A method for interfacing with a user of an enterprise intrusion detection system, the method comprises receiving at least one packet flow, each packet flow originating from a unique node in the intrusion detection system and comprising descriptive information and a plurality of packet headers. The descriptive information of a first subset of the received packet flows is communicated to a user based at least in part on a filtering ruleset. A second subset of the received packet flows is concealed from the user based at least in part on the filtering ruleset. In response to receiving a command from the user, the plurality of packet headers for at least one packet flow in the first subset is communicated to the user.