Constructing an inference graph for a network
    33.
    发明授权
    Constructing an inference graph for a network 有权
    为网络构建推理图

    公开(公告)号:US08443074B2

    公开(公告)日:2013-05-14

    申请号:US12039714

    申请日:2008-02-28

    IPC分类号: G06F15/16 G06F17/00

    CPC分类号: H04L41/5058 H04L41/12

    摘要: Constructing an inference graph relates to the creation of a graph that reflects dependencies within a network. In an example embodiment, a method includes determining dependencies among components of a network and constructing an inference graph for the network responsive to the dependencies. The components of the network include services and hardware components, and the inference graph reflects cross-layer components including the services and the hardware components. In another example embodiment, a system includes a service dependency analyzer and an inference graph constructor. The service dependency analyzer is to determine dependencies among components of a network, the components including services and hardware components. The inference graph constructor is to construct an inference graph for the network responsive to the dependencies, the inference graph reflecting cross-layer components including the services and the hardware components.

    摘要翻译: 构造推理图与创建反映网络中依赖关系的图形有关。 在示例实施例中,一种方法包括确定网络的组件之间的依赖关系,并响应于依赖关系构建网络的推理图。 网络的组件包括服务和硬件组件,推理图反映了跨层组件,包括服务和硬件组件。 在另一示例实施例中,系统包括服务依赖性分析器和推理图构造器。 服务依赖性分析器是确定网络组件之间的依赖关系,包括服务和硬件组件在内的组件。 推理图构造函数是响应于依赖关系构建网络的推理图,反映包括服务和硬件组件在内的跨层组件的推理图。

    DETECTION OF ROGUE WIRELESS DEVICES FROM DYNAMIC HOST CONTROL PROTOCOL REQUESTS
    34.
    发明申请
    DETECTION OF ROGUE WIRELESS DEVICES FROM DYNAMIC HOST CONTROL PROTOCOL REQUESTS 审中-公开
    从动态主机控制协议请求中检测无线设备

    公开(公告)号:US20110271345A1

    公开(公告)日:2011-11-03

    申请号:US13179338

    申请日:2011-07-08

    IPC分类号: G06F21/00

    摘要: A method to determine if a rogue device is connected to a specific wired network from dynamic host control protocol (DHCP) requests on the wired network. These DHCP requests are analyzed to determine the type of device issuing the request. Once the type of device has been determined, it can be checked against a list of authorized device types. If the device issuing the DHCP request is not an authorized device type, then it can be determined that the suspect device is a rogue that is connected to the specific wired network. Additionally, even if the system of the present invention determines that it is an authorized device type, if the device is not one of the few authorized devices of this type, e.g. because its MAC address is not recognized as that of one of the authorized devices, the system can flag the suspect as a rogue.

    摘要翻译: 一种确定流氓设备是否从有线网络上的动态主机控制协议(DHCP)请求连接到特定有线网络的方法。 分析这些DHCP请求以确定发出请求的设备的类型。 一旦确定了设备类型,就可以根据授权的设备类型列表进行检查。 如果发出DHCP请求的设备不是授权设备类型,则可以确定可疑设备是连接到特定有线网络的流氓。 另外,即使本发明的系统确定它是授权设备类型,如果该设备不是这种类型的少数授权设备之一,例如, 由于其MAC地址不被识别为其中一个授权设备的MAC地址,系统可以将嫌疑犯标记为流氓。

    Detect user-perceived faults using packet traces in enterprise networks
    35.
    发明授权
    Detect user-perceived faults using packet traces in enterprise networks 有权
    使用企业网络中的数据包跟踪检测用户感知的故障

    公开(公告)号:US07640460B2

    公开(公告)日:2009-12-29

    申请号:US11680477

    申请日:2007-02-28

    IPC分类号: G06F11/00

    CPC分类号: H04L41/0681

    摘要: Exemplary methods, computer-readable media, and systems for detecting a fault by a packet trace, includes monitoring at least one packet transmitted to or received from, an computing device of an end user, between one or more computing devices implementing at least one of a service or an application on an enterprise network. The process also includes identifying whether an abnormal condition occurred on the computing device of the end user based on monitoring at least one packet transmitted to or received from, the computing device of the end user; and detecting a fault by using an algorithm based on monitoring at least one packet transmitted or received from, the computing device of the end user; wherein the fault indicates a desired course of action did not occur while the computing device of the end user uses at least one of the service or the application in the enterprise network.

    摘要翻译: 用于通过分组跟踪检测故障的示例性方法,计算机可读介质和系统包括监视在一个或多个计算设备之间发送到终端用户的计算设备或从终端用户的计算设备接收的至少一个分组,其实现以下中的至少一个: 企业网络上的服务或应用程序。 该过程还包括基于监视终端用户的计算设备发送到或从其接收到的至少一个分组来识别终端用户的计算设备上是否发生异常状况; 以及通过使用基于监视从最终用户的计算设备发送或接收的至少一个分组的算法来检测故障; 其中所述故障指示在所述终端用户的计算设备使用所述企业网络中的所述服务或应用中的至少一个的情况下不发生期望的操作过程。