Abstract: A method and a system for monitoring network activities associated with a computer connected to a network are provided. The method may include detecting a bot activity associated with the computer; attributing a bot status to the computer, based on a bot activity type associated with the bot activity, prior detections of bot activities, and considering time stamps. The method may also include updating the bot status attributed to the computer, based upon detection of subsequent bot activities associated with the computer, the bot activity types associated with the subsequent bot activities, and one or more other criteria. In one example embodiment, the network activities may include network transmissions and behavioral patterns. According to example embodiments, the system may include a network monitor, a bot activity detection module, a bot status module, and a bot status update module.

Abstract: Methods and systems for detection and communication of computer infection status in a networked environment are disclosed. In example embodiments, a network device includes a detection component to detect the presence of unwanted software in a networked computer from the network device not resident in the networked computer, a dispatch component to dispatch an infection notification for communication to the networked computer, and a communication component to handle communication with a user of the infected computer.

Abstract: A networking system and automatic method in a networking system comprising at least one switching device and a plurality of at least one end-station interconnected with the at least one switching device, wherein the at least one switching device and at least one end-station are interconnected in a topology. A configuration device is included which has a configuration modification detection circuit for detecting the modification of the topology. A configuration policy maintenance circuit is provided for storing policies related to reconfiguring the at least one switching device upon the modification of the topology. A policy evaluation circuit is provided for determining which at least one end-station and ports should be grouped together upon the detection of the modification of the topology in a first manner. A reconfiguration circuit is provided for reconfiguring the at least one switching device in the first network to enable at least one end-station and ports to be grouped together in the first manner.