US6282546B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for real-time insertion of data into a multi-dimensional database for network intrusion detection and vulnerability assessment
Assignee: Cisco Technology Inc
•
Filing: 1998-06-30
•
Granted: 2001-08-28
•
Expires: 2018-06-30
Abstract
Abstract A system and method are disclosed for real-time insertion of data into a multi-dimensional database. The system includes a multi-dimensional database and a user interface operable to access and provide views into the multi-dimensional database. A data insertion engine is coupled to and operable to access the multi-dimensional database. The data insertion engine is further operable to receive and process a real-time data feed and to insert data into the multi-dimensional database responsive to processing of the real-time data feed. In one embodiment, the real-time data feed can represent exploited network vulnerabilities, and the system can be used for network intrusion detection and vulnerability assessment. The method includes receiving a real-time data feed representing detection of an event and processing the event against the multi-dimensional database. Cells associated with the event are identified in the multi-dimensional database and appropriate vectors to the identified cells are created. Data representing the event is then inserted at the identified cells. Visibility to the inserted data is provided through a user interface to the multi-dimensional database. In one embodiment, the event can be an exploited network vulnerability, and the method can be used for intrusion detection and vulnerability assessment.
Inventors
- 👤 Robert Gleichauf
- 👤 Steven Shanklin
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 00:28
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/604; G06F16/00; G06F16/20; G06F16/24; G06F16/245; G06F16/2455; G06F16/24568; G06F16/28; G06F16/283; H; H04; H04L; H04L63/00; H04L63/14; H04L63/1408; H04L63/1425; H04L63/1433; Y; Y10; Y10S; Y10S707/00; Y10S707/953; Y10S707/957; Y10S707/959; Y10S707/99931; Y10S707/99933; Y10S707/99936; Y10S707/99941; Y10S707/99943
Claims Analysis
Total Claims: 29
Claim 1
Independent Claim
97 words
A system for real-time insertion of data into a multi-dimensional database, comprising: a multi-dimensional database; a user interface operable to access and provide views into the multi-dimensional database, wherein the views comprise any of a slice, a pivot or a zoom view; and a data insertion engine coupled to and operable to access the multi-dimensional database; the data insertion engine further operable to receive a real-time data feed provided by a network intrusion detection system, to process the real-time data feed and to insert data into the multi-dimensional database responsive to processing of the real-time data feed.
Claim 2
Independent Claim
97 words
A system for real-time insertion of data into a multi-dimensional database, comprising: a multi-dimensional database; a user interface operable to access and provide views into the multi-dimensional database, wherein the views comprise any of a slice, a pivot or a zoom view; and a data insertion engine coupled to and operable to access the multi-dimensional database; the data insertion engine further operable to receive a real-time data feed provided by a network intrusion detection system, to process the real-time data feed and to insert data into the multi-dimensional database responsive to processing of the real-time data feed.
Claim 3
Dependent Claim
16 words
The system of claim 1 , wherein the real-time data feed represents detection of an event.
Claim 4
Dependent Claim
19 words
The system of claim 2 , wherein the multi-dimensional database stores data representing a configuration of a network environment.
Claim 5
Dependent Claim
17 words
The system of claim 3 , wherein the configuration of the network environment includes network vulnerability information.
Claim 6
Dependent Claim
17 words
The system of claim 4 , wherein the event is an exploited vulnerability within the network environment.
Claim 7
Dependent Claim
24 words
The system of claim 5 , wherein the user interface is further operable to actively alert a system administrator responsive to the exploited vulnerability.
Claim 8
Dependent Claim
20 words
The system of claim 5 , wherein dimensions of the multi-dimensional database comprise host address, operating system, ports, and services.
Claim 9
Dependent Claim
18 words
The system of claim 7 , wherein the dimensions further comprise confirmed vulnerabilities, potential vulnerabilities and exploited vulnerabilities.
Claim 10
Dependent Claim
21 words
The system of claim 1 , wherein the user interface is further operable to provide views that comprise drill down views.
Claim 11
Independent Claim
98 words
A method for real-time insertion of data into a multi-dimensional database, comprising: receiving a real-time data feed representing detection of an event, the real-time data feed being provided by a network intrusion detection system; processing the event against the multi-dimensional database; identifying cells in the multi-dimensional database that are associated with the event; creating appropriate vectors to the identified cells; inserting data representing the event at the identified cells; and providing visibility to the inserted data through a user interface, wherein providing visibility includes providing views that comprise any of a slice, a pivot or a zoom view.
Claim 12
Independent Claim
98 words
A method for real-time insertion of data into a multi-dimensional database, comprising: receiving a real-time data feed representing detection of an event, the real-time data feed being provided by a network intrusion detection system; processing the event against the multi-dimensional database; identifying cells in the multi-dimensional database that are associated with the event; creating appropriate vectors to the identified cells; inserting data representing the event at the identified cells; and providing visibility to the inserted data through a user interface, wherein providing visibility includes providing views that comprise any of a slice, a pivot or a zoom view.
Claim 13
Dependent Claim
19 words
The method of claim 10 , wherein the multi-dimensional database stores data representing a configuration of a network environment.
Claim 14
Dependent Claim
17 words
The method of claim 11 , wherein the configuration of the network environment includes network vulnerability information.
Claim 15
Dependent Claim
17 words
The method of claim 12 , wherein the event is an exploited vulnerability within the network environment.
Claim 16
Dependent Claim
18 words
The method of claim 13 , further comprising actively alerting a system administrator responsive to the exploited vulnerability.
Claim 17
Dependent Claim
20 words
The method of claim 14 , wherein dimensions of the multi-dimensional database comprise host address, operating system, ports, and services.
Claim 18
Dependent Claim
18 words
The method of claim 15 , wherein the dimensions further comprise confirmed vulnerabilities, potential vulnerabilities and exploited vulnerabilities.
Claim 19
Dependent Claim
14 words
The method of claim 10 , wherein the views further comprise drill down views.
Claim 20
Independent Claim
112 words
A system for real-time insertion of data into a multi-dimensional database, comprising: a storage device; an application stored on the storage device, the application operable to: receive a real-time data feed representing detection of an event, the real-time data feed being provided by a network intrusion detection system; process the event against the multi-dimensional database; identify cells in the multi-dimensional database that are associated with the event; create appropriate vectors to the identified cells; insert data representing the event at the identified cells; and provide visibility to the inserted data through a user interface, wherein providing visibility includes providing views that comprise any of a slice, a pivot or a zoom view.
Claim 21
Independent Claim
112 words
A system for real-time insertion of data into a multi-dimensional database, comprising: a storage device; an application stored on the storage device, the application operable to: receive a real-time data feed representing detection of an event, the real-time data feed being provided by a network intrusion detection system; process the event against the multi-dimensional database; identify cells in the multi-dimensional database that are associated with the event; create appropriate vectors to the identified cells; insert data representing the event at the identified cells; and provide visibility to the inserted data through a user interface, wherein providing visibility includes providing views that comprise any of a slice, a pivot or a zoom view.
Claim 22
Dependent Claim
17 words
The system of claim 18 , wherein the event is an exploited vulnerability within the network environment.
Claim 23
Dependent Claim
20 words
The system of claim 18 , wherein dimensions of the multi-dimensional database comprise host address, operating system, ports, and services.
Claim 24
Dependent Claim
18 words
The system of claim 20 , wherein the dimensions further comprise confirmed vulnerabilities, potential vulnerabilities and exploited vulnerabilities.
Claim 25
Independent Claim
110 words
A system for real-time insertion of data into a multi-dimensional database, comprising: means for receiving a real-time data feed representing detection of an event, the real-time data feed being provided by a network intrusion detection system; means for processing the event against the multi-dimensional database; means for identifying cells in the multi-dimensional database that are associated with the event; means for creating appropriate vectors to the identified cells; means for inserting data representing the event at the identified cells; and means for providing visibility to the inserted data through a user interface, wherein providing visibility includes providing views that comprise any of a slice, a pivot or a zoom view.
Claim 26
Independent Claim
110 words
A system for real-time insertion of data into a multi-dimensional database, comprising: means for receiving a real-time data feed representing detection of an event, the real-time data feed being provided by a network intrusion detection system; means for processing the event against the multi-dimensional database; means for identifying cells in the multi-dimensional database that are associated with the event; means for creating appropriate vectors to the identified cells; means for inserting data representing the event at the identified cells; and means for providing visibility to the inserted data through a user interface, wherein providing visibility includes providing views that comprise any of a slice, a pivot or a zoom view.
Claim 27
Dependent Claim
17 words
The system of claim 22 , wherein the event is an exploited vulnerability within the network environment.
Claim 28
Dependent Claim
20 words
The system of claim 22 , wherein dimensions of the multi-dimensional database comprise host address, operating system, ports, and services.
Claim 29
Dependent Claim
18 words
The system of claim 24 , wherein the dimensions further comprise confirmed vulnerabilities, potential vulnerabilities and exploited vulnerabilities.
References Cited (Backward Citations)
US4868866A
Cited
US4937743A
Cited
US5101402A
Cited
US5032979A
Cited
US5404488A
Cited
US5319777A
Cited
US5278901A
Cited
US5774878A
Cited
US5647058A
Cited
US5621889A
Cited
US5448724A
Cited
US5414833A
Cited
US5606668A
Cited
US5557742A
Cited
US5524238A
Cited
US5649190A
Cited
US5488715A
Cited
US5592666A
Cited
US5699513A
Cited
US5793763A
Cited
US5826014A
Cited
US5931946A
Cited
US5768133A
Cited
US5721910A
Cited
US5798706A
Cited
US5767854A
Cited
US5991881A
Cited
US5796942A
Cited
US5854897A
Cited
US5805801A
Cited
US5978788A
Cited
US6032158A
Cited
US5919257A
Cited
US6003036A
Cited
US5999944A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-08-27 | 2005-02-26 | 2005-08-28 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-08-27 | 2009-02-26 | 2009-08-28 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-08-27 | 2013-02-26 | 2013-08-28 | $7700.00 | Window Closed / Lapsed |