Patents by Inventor Paul C. Brutch

Paul C. Brutch has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Method and apparatus for detecting denial-of-service attacks using kernel execution profiles
    Patent number: 7043756
    Abstract: One embodiment of the present invention provides a system that detects denial-of-service attacks by using an execution profile for a kernel of a server computer system. The system produces a run-time execution profile by gathering statistics related to execution of a protocol stack within the kernel, wherein the protocol stack processes packets received from client computer systems. Next, the system compares the run-time execution profile with a normal execution profile, wherein the normal execution profile is representative of execution when the server is not subject to a denial-of-service attack. If the run-time execution profile deviates from the normal execution profile, the system indicates that a denial-of-service attack is taking place.
    Type: Grant
    Filed: September 27, 2001
    Date of Patent: May 9, 2006
    Assignee: McAfee, Inc.
    Inventors: Guy Tsafnat, Cheuk W. Ko, Paul C. Brutch
  • Method and apparatus for detecting denial-of-service attacks using kernel execution profiles
    Publication number: 20030061513
    Abstract: One embodiment of the present invention provides a system that detects denial-of-service attacks by using an execution profile for a kernel of a server computer system. The system produces a run-time execution profile by gathering statistics related to execution of a protocol stack within the kernel, wherein the protocol stack processes packets received from client computer systems. Next, the system compares the run-time execution profile with a normal execution profile, wherein the normal execution profile is representative of execution when the server is not subject to a denial-of-service attack. If the run-time execution profile deviates from the normal execution profile, the system indicates that a denial-of-service attack is taking place.
    Type: Application
    Filed: September 27, 2001
    Publication date: March 27, 2003
    Inventors: Guy Tsafnat, Cheuk W. Ko, Paul C. Brutch