Information security analysis system
A method of detecting virus computer code, analyzing computer source and/or executable code, dynamic monitoring data communication networks and 3-d visualizing and animating data comprises: a) collecting or gathering information on the network such as the types of computer source code and/or executa...
Gespeichert in:
Hauptverfasser: | , , , |
---|---|
Format: | Patent |
Sprache: | eng |
Schlagworte: | |
Online-Zugang: | Volltext bestellen |
Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
Zusammenfassung: | A method of detecting virus computer code, analyzing computer source and/or executable code, dynamic monitoring data communication networks and 3-d visualizing and animating data comprises: a) collecting or gathering information on the network such as the types of computer source code and/or executable code or the structure and operation of the network and network users; b) generating a knowledge base of the information gathered; c) parsing the information in the generated knowledge base to generate data in selected categories in readable format and d) analyzing and visualizing data in the selected categories. If the information gathered relates to the types of computer code then step d) includes analyzing the data in the selected categories to create functional alteration between two or more similar codes for computer programs and visualizing the analyzed data for comparison of two or more similar codes for computer programs to determine the degree of functional alteration. If the information gathered relates to the structure and operation of the network and network users then step d) includes analyzing the data in the selected categories for preparation of visualizing diagrams and displaying the analyzed data for graphical analysis of the gathered information for animation of network traffic and structure. The software used, not including the computer operating systems, is a combination of sensor, analysis, data conversion, and visualization programs. The hardware platforms consist of several different types of interconnected computers, which share the software programs, data files, and visualization programs via a Local Area Network (LAN). This collection and integration of software and the migration to a single computer platform results in an approach to LAN/WAN monitoring in either a passive and/or active mode. The architecture permits digital data input from external sensors for analysis, display and correlation with data and displays derived from the four major software concept groups. |
---|