Abstract: A method and associated system for detecting intrusion of a wireless network. A determination is made that a first data stream received by the wireless network does not include N1 communication protocols included in a second data stream previously determined to be valid, N1 being a positive integer. A determination is made that N1 exceeds a predetermined first tolerance, and in response, that the first data stream does not include N2 communication protocols included in a third data stream previously determined to be intrusive to the wireless network, N2 being an integer equal to or greater than zero. A determination is made that N2 is less than a predetermined second tolerance, and in response, an alert that the received data stream is potentially intrusive to the wireless network is generated.

Abstract: A method and associated system for detecting intrusion of a wireless network. A determination is made that a first data stream received by the wireless network does not include N1 communication protocols included in a second data stream previously determined to be valid, N1 being a positive integer. A determination is made that N1 exceeds a predetermined first tolerance, and in response, that the first data stream does not include N2 communication protocols included in a third data stream previously determined to be intrusive to the wireless network, N2 being an integer equal to or greater than zero. A determination is made that N2 is less than a predetermined second tolerance, and in response, an alert that the received data stream is potentially intrusive to the wireless network is generated.

Abstract: A method and associated system for detecting intrusion of a wireless network. A determination is made that a first data stream received by the wireless network does not include N1 communication protocols included in a second data stream previously determined to be valid, N1 being a positive integer. A determination is made that N1 exceeds a predetermined first tolerance, and in response, that the first data stream does not include N2 communication protocols included in a third data stream previously determined to be intrusive to the wireless network, N2 being an integer equal to or greater than zero. A determination is made that N2 is less than a predetermined second tolerance, and in response, an alert that the received data stream is potentially intrusive to the wireless network is generated.

Abstract: A method and associated system for detecting intrusion of a wireless network. A determination is made that a first data stream received by the wireless network does not include N1 communication protocols included in a second data stream previously determined to be valid, N1 being a positive integer. A determination is made that N1 exceeds a predetermined first tolerance, and in response, that the first data stream does not include N2 communication protocols included in a third data stream previously determined to be intrusive to the wireless network, N2 being an integer equal to or greater than zero. A determination is made that N2 is less than a predetermined second tolerance, and in response, an alert that the received data stream is potentially intrusive to the wireless network is generated.

Abstract: In general, the present invention provides a method, system and program product for detecting intrusion of a wireless network. Specifically, under the present invention, a data stream received by a wireless network is monitored. A validity deviation is determined by comparing the data stream to a valid data stream. If the validity deviation exceeds a validity threshold, an intrusion deviation is determined by comparing the data stream to a known intrusion data stream. Then, if the intrusion deviation is less than an intrusion threshold, intrusion is detected and an intrusion alert is generated.

Abstract: A system and method capable of obtaining information dynamically of assets residing on a network. The system and method further capable of comparing a device identifier to the dynamically obtained information of assets and policies at a time of a request to access the network and determining whether the device identifier matches at least one of the dynamically obtained information of assets and policies. The system and method further capable of quarantining the device from the network or a portion thereof based upon the determining.

Abstract: The present invention provides a system, method, and program product for characterizing computer attackers by obtaining attack pattern information about computer attacks performed over time and generating an attacker signature for each attacker based on the attack pattern information.

Abstract: The present invention provides a system, method, and program product for characterizing computer attackers by obtaining attack pattern information about computer attacks performed over time and generating an attacker signature for each attacker based on the attack pattern information.

Abstract: In general, the present invention provides a method, system and program product for detecting intrusion of a wireless network. Specifically, under the present invention, a data stream received by a wireless network is monitored. A validity deviation is determined by comparing the data stream to a valid data stream. If the validity deviation exceeds a validity threshold, an intrusion deviation is determined by comparing the data stream to a known intrusion data stream. Then, if the intrusion deviation is less than an intrusion threshold, intrusion is detected and an intrusion alert is generated.