Provisional application No. 60/518,742, filed on Nov. 12, 2003, provisional application No.
60/613,637, A method, apparatus and medium are provided for detecting filed on Sep. 28 …

(57) ABSTRACT A method, apparatus and medium are provided for detecting anomalous
payloads transmitted through a network. The sys tem receives payloads within the network …

A method, apparatus, and medium are provided for tracing the origin of network
transmissions. Connection records are maintained at computer system for storing source …

In one embodiment, local software code present in a com puter system enables real-time
detection of whether the com puter system is properly protected against malicious attacks …

Policy tion performed in the computerized device produces an undesired processing
outcome that violates a security policy and Subsequently detecting attempted performance …

BACKGROUND Computer systems, networks and data centers are exposed to a constant
and differing variety of attacks that expose Vulnerabilities of such systems in order to …

A system inserts at least one notifying identifier in the computer system. The at least one
notifying identifier provides execution information associated with the computer system. The …

(57) ABSTRACT A system receives information from at least one security interceptor
associated with at least one computer system. The information identifies details associated …

(54) METHODS AND APPARATUS PROVIDING 6,775,780 B1 8, 2004 Muttik COMPUTER
AND NETWORKSECURITY 6,898,715 B1* 5/2005 Smithson et al................ T26/24 6,990,591 …

A method, apparatus, and medium are provided for identi fying files. Files are received from
various Sources, and a Statistical distribution is generated for data contained in each file …