A network device allows inbound connections from external addresses to a computer on a
local network while forbidding output connections from the computer to that external address …

BACKGROUND Malicious software (malware) is software used or created by attackers to
disrupt computer operation, gather sensitive information, or gain access to private computer …

A bot detection engine to determine whether hosts in an organization's network are
performing bot-related activities is disclosed. A bot detection engine can receive network …

BACKGROUND A “botnet'is a collection of infected computer devices, each of which is
known as a “bot'or" node', connected to a network such as the Internet. Computer devices …

A network device allows inbound connections from external addresses to a computer on a
local network while forbidding output connections from the computer to that external address …

In one embodiment, a device generates one or more time series of characteristics of client-
server communications observed in a network for a particular client in the network. The …

A method and a device are provided for categorizing a Stream Control Transmission
Protocol (SCTP) receiver terminal (120) as a malicious SCTP receiver terminal, which …

The system and method described herein may leverage active network scanning and
passive network monitoring to provide strategic anti-malware monitoring in a network. In …

A botnet identification module identifies members of one or more botnets based upon
network traffic destined to one or more servers over time, and provides sets of botnet …

A network device allows inbound connections from external addresses to a computer on a
local network while forbidding output connections from the computer to that external address …