A method of preventing intrusions on a node of a network comprising monitoring, by a first layer of an intrusion prevention system, application data of applications running at on the node, monitoring, by a second layer of the intrusion prevention system, transport layer data of the node, and monitoring,...http://www.google.de/patents/US20030084329?utm_source=gb-gplus-sharePatent US20030084329 - Method, computer readable medium, and node for a three-layered intrusion prevention system for detecting network exploits
