专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08935188B2 Method and apparatus for classifying applications using the collective properties of network traffic in a traffic activity graph 有权
标题翻译：使用交通活动图中网络流量的集体属性对应用进行分类的方法和装置
公开(公告)号：US08935188B2
公开(公告)日：2015-01-13
申请号：US12858303
申请日：2010-08-17
申请人： Nicholas Duffield , Patrick Haffner , Yu Jin , Subhabrata Sen , Zhi-Li Zhang
发明人： Nicholas Duffield , Patrick Haffner , Yu Jin , Subhabrata Sen , Zhi-Li Zhang
IPC分类号： G06F15/18 , G06F15/173 , H04L12/26 , H04L29/08
CPC分类号： H04L43/045 , H04L43/026 , H04L67/22
摘要： In one embodiment, the present disclosure is a method and apparatus for classifying applications using the collective properties of network traffic. In one embodiment, a method for classifying traffic in a communication network includes receiving a traffic activity graph, the traffic activity graph comprising a plurality of nodes interconnected by a plurality of edges, where each of the nodes represents an endpoint associated with the communication network and each of the edges represents traffic between a corresponding pair of the nodes, generating an initial set of inferences as to an application class associated with each of the edges, based on at least one measured statistic related to at least one traffic flow in the communication network, and refining the initial set of inferences based on a spatial distribution of the traffic flows, to produce a final traffic activity graph.
摘要翻译：在一个实施例中，本公开是用于使用网络业务的集合属性对应用进行分类的方法和装置。在一个实施例中，用于对通信网络中的业务进行分类的方法包括接收业务活动图，所述业务活动图包括由多个边缘互连的多个节点，其中每个节点表示与所述通信网络相关联的端点，每个边缘表示对应的一对节点之间的流量，基于与通信网络中的至少一个业务流相关的至少一个测量的统计量，生成关于与每个边缘相关联的应用类别的初始推断集合，并且基于业务流的空间分布来优化初始推理集合，以产生最终业务活动图。

2. 发明授权

US08279860B1 SIP-based VoIP traffic behavior profiling method 有权
标题翻译：基于SIP的VoIP流量行为分析方法
公开(公告)号：US08279860B1
公开(公告)日：2012-10-02
申请号：US12268676
申请日：2008-11-11
申请人： Antonio Nucci , Supranamaya Ranjan , Zhi-Li Zhang
发明人： Antonio Nucci , Supranamaya Ranjan , Zhi-Li Zhang
IPC分类号： H04L12/66 , H04L12/28
CPC分类号： H04L63/1416 , H04L65/1006 , Y10T70/5854
摘要： With the widespread adoption of SIP-based VoIP, understanding the characteristics of SIP traffic behavior is critical to problem diagnosis and security protection of VoIP services. A general methodology is provided for profiling SIP-based VoIP traffic behavior at several levels: SIP server host, server entity (e.g., registrar and call proxy) and individual user levels. Using SIP traffic traces captured in a production VoIP network, the characteristics of SIP-based VoIP traffic behavior in an operational environment is illustrated and the effectiveness of the general profiling methodology is demonstrated. In particular, the profiling methodology identifies anomalies due to performance problems and/or implementation flaws through a case study. The efficacy of the methodology in detecting potential VoIP attacks is also demonstrated through a test-bed experimentation.
摘要翻译：随着基于SIP的VoIP的广泛采用，了解SIP流量行为的特征对于VoIP服务的问题诊断和安全保护至关重要。提供了一种通用方法，用于在多个层面上分析基于SIP的VoIP流量行为：SIP服务器主机，服务器实体（例如，注册器和呼叫代理）以及各个用户级别。使用在生产VoIP网络中捕获的SIP流量跟踪，说明了在操作环境中基于SIP的VoIP流量行为的特征，并且演示了一般分析方法的有效性。特别地，分析方法通过案例研究来确定由于性能问题和/或实施缺陷导致的异常。该方法在检测潜在VoIP攻击中的功效也通过试验台实验证明。

3. 发明授权

US08028337B1 Profile-aware filtering of network traffic 有权
标题翻译：配置文件感知过滤网络流量
公开(公告)号：US08028337B1
公开(公告)日：2011-09-27
申请号：US11463723
申请日：2006-08-10
申请人： Kuai Xu , Zhi-Li Zhang , Supratik Bhattacharyya
发明人： Kuai Xu , Zhi-Li Zhang , Supratik Bhattacharyya
IPC分类号： G06F11/00
CPC分类号： G06F11/00 , H04L63/00 , H04L63/1425
摘要： A system and a method for profiling traffic on a computer network. Flows are observed traversing a communication link. Relative uncertainty values are computed for the dimensions of these flows. These relative uncertainty values are used to identify dominant feature values in the various flow dimensions. Flows having these dominant feature values are filtered.
摘要翻译：用于在计算机网络上分析流量的系统和方法。通过通信链路观察流。对这些流的尺寸计算相对不确定度值。这些相对不确定度值用于识别各种流量维度中的主要特征值。具有这些主要特征值的流程被过滤。

4. 发明授权

US07441429B1 SIP-based VoIP traffic behavior profiling 有权
标题翻译：基于SIP的VoIP流量行为分析
公开(公告)号：US07441429B1
公开(公告)日：2008-10-28
申请号：US11540893
申请日：2006-09-28
申请人： Antonio Nucci , Supranamaya Ranjan , Zhi-Li Zhang
发明人： Antonio Nucci , Supranamaya Ranjan , Zhi-Li Zhang
IPC分类号： G01R31/08
CPC分类号： H04L63/1416 , H04L65/1006 , Y10T70/5854
摘要： With the widespread adoption of SIP-based VoIP, understanding the characteristics of SIP traffic behavior is critical to problem diagnosis and security protection of VoIP services. A general methodology is provided for profiling SIP-based VoIP traffic behavior at several levels: SIP server host, server entity (e.g., registrar and call proxy) and individual user levels. Using SIP traffic traces captured in a production VoIP network, the characteristics of SIP-based VoIP traffic behavior in an operational environment is illustrated and the effectiveness of the general profiling methodology is demonstrated. In particular, the profiling methodology identifies anomalies due to performance problems and/or implementation flaws through a case study. The efficacy of the methodology in detecting potential VoIP attacks is also demonstrated through a test bed experimentation.
摘要翻译：随着基于SIP的VoIP的广泛采用，了解SIP流量行为的特征对于VoIP服务的问题诊断和安全保护至关重要。提供了一种通用方法，用于在多个层面上分析基于SIP的VoIP流量行为：SIP服务器主机，服务器实体（例如，注册器和呼叫代理）以及各个用户级别。使用在生产VoIP网络中捕获的SIP流量跟踪，说明了在操作环境中基于SIP的VoIP流量行为的特征，并且演示了一般分析方法的有效性。特别地，分析方法通过案例研究来确定由于性能问题和/或实施缺陷导致的异常。该方法在检测潜在VoIP攻击中的功效也通过试验台实验证明。

5. 发明授权

US08204974B1 Identifying significant behaviors within network traffic 有权
标题翻译：识别网络流量中的重要行为
公开(公告)号：US08204974B1
公开(公告)日：2012-06-19
申请号：US11214519
申请日：2005-08-30
申请人： Supratik Bhattacharyya , Kuai Xu , Zhi-Li Zhang
发明人： Supratik Bhattacharyya , Kuai Xu , Zhi-Li Zhang
IPC分类号： G06F15/173 , G06F11/00 , G06F12/14 , G06F12/16 , G08B23/00
CPC分类号： H04L41/142 , H04L43/026 , H04L43/028
摘要： A system and a method for identifying significant behaviors from network traffic. A probability value is assigned to each cluster in a set of clusters. An uncertainty value is computed indicating a level of variability among the probability values. One or more clusters are removed from the set of clusters until the uncertainty value exceeds a desired uncertainty threshold, and each of the removed clusters is identified as a significant cluster.
摘要翻译：一种从网络流量中识别重要行为的系统和方法。将概率值分配给一组集群中的每个集群。计算出不确定性值，指示概率值之间的可变性水平。一组或多个簇从簇的集合中移除，直到不确定性值超过期望的不确定性阈值，并且每个被去除的簇被识别为重要簇。

6. 发明申请

US20120047096A1 METHOD AND APPARATUS FOR CLASSIFYING APPLICATIONS USING THE COLLECTIVE PROPERTIES OF NETWORK TRAFFIC 有权
标题翻译：使用网络交通的集合性质分类应用的方法和装置
公开(公告)号：US20120047096A1
公开(公告)日：2012-02-23
申请号：US12858303
申请日：2010-08-17
申请人： Nicholas Duffield , Patrick Haffner , Yu Jin , Subhabrata Sen , Zhi-Li Zhang
发明人： Nicholas Duffield , Patrick Haffner , Yu Jin , Subhabrata Sen , Zhi-Li Zhang
IPC分类号： G06F15/18 , G06N3/08
CPC分类号： H04L43/045 , H04L43/026 , H04L67/22
摘要： In one embodiment, the present disclosure is a method and apparatus for classifying applications using the collective properties of network traffic. In one embodiment, a method for classifying traffic in a communication network includes receiving a traffic activity graph, the traffic activity graph comprising a plurality of nodes interconnected by a plurality of edges, where each of the nodes represents an endpoint associated with the communication network and each of the edges represents traffic between a corresponding pair of the nodes, generating an initial set of inferences as to an application class associated with each of the edges, based on at least one measured statistic related to at least one traffic flow in the communication network, and refining the initial set of inferences based on a spatial distribution of the traffic flows, to produce a final traffic activity graph.
摘要翻译：在一个实施例中，本公开是用于使用网络业务的集合属性对应用进行分类的方法和装置。在一个实施例中，用于对通信网络中的业务进行分类的方法包括接收业务活动图，所述业务活动图包括由多个边缘互连的多个节点，其中每个节点表示与所述通信网络相关联的端点，每个边缘表示对应的一对节点之间的流量，基于与通信网络中的至少一个业务流相关的至少一个测量的统计量，生成关于与每个边缘相关联的应用类别的初始推断集合，并且基于业务流的空间分布来优化初始推理集合，以产生最终业务活动图。

7. 发明申请

US20080276317A1 Detection of Multi-Step Computer Processes Such as Network Intrusions 审中-公开
标题翻译：检测网络入侵等多步计算机进程
公开(公告)号：US20080276317A1
公开(公告)日：2008-11-06
申请号：US11794941
申请日：2006-01-10
申请人： Varun Chandola , Eric Eilertson , Haiyang Liu , Mark Shaneck , Changho Choi , Gyoergy Simon , Yongdae Kim , Vipin Kumar , Jaideep Srivastava , Zhi-Li Zhang
发明人： Varun Chandola , Eric Eilertson , Haiyang Liu , Mark Shaneck , Changho Choi , Gyoergy Simon , Yongdae Kim , Vipin Kumar , Jaideep Srivastava , Zhi-Li Zhang
IPC分类号： G06F21/00
CPC分类号： H04L63/1425
摘要： Multi-step processes such as intrusions into computer networks are detected from individual activities or events such as communications by identifying anchor points (FIG. 2, 220) that are likely to be part of the process, proceeding from the anchor points to extract other activities as a context of the anchor points, and characterizing the process from the activities in the context. The process may be characterized as sets of context activities.
摘要翻译：通过识别可能是该过程的一部分的锚点（图2，220），从各个活动或诸如通信的事件中检测诸如入侵到计算机网络中的多步骤过程，从锚点进行以提取其他活动作为锚点的上下文，并从上下文中的活动表征过程。该过程可以被描述为一组上下文活动。

8. 发明授权

US07257632B2 Method and apparatus for a bandwidth broker in a packet network 有权
标题翻译：用于分组网络中的带宽代理的方法和装置
公开(公告)号：US07257632B2
公开(公告)日：2007-08-14
申请号：US09919365
申请日：2001-07-30
申请人： Zhi-Li Zhang , Yiwei Thomas Hou , Zhenhai Duan
发明人： Zhi-Li Zhang , Yiwei Thomas Hou , Zhenhai Duan
IPC分类号： G06F15/173
CPC分类号： H04L47/805 , H04L41/0896 , H04L47/70 , H04L47/745 , H04L47/765 , H04L47/781 , H04L47/829
摘要： A method and apparatus for allocating bandwidth within a network domain. A centralized bandwidth broker maintains a link-level database including detailed flow data for individual links in a network domain and a path-level database including summarized flow data for individual paths in the network domain. The bandwidth broker determines bandwidth allocations at a path-level by allocating discrete amounts of bandwidth, termed quotas, based on flow requests. If a flow request cannot be satisfied by allocating quotas, then the bandwidth broker uses the link-level database to recover bandwidth from unused bandwidth by other paths on the same link in order to satisfy the flow request. In another embodiment of a bandwidth broker, the centralized bandwidth broker is replaced by a distributed bandwidth broker including a central bandwidth broker and one or more edge bandwidth brokers. An edge bandwidth broker conducts path-level allocations and requests or releases quotas from and to the central bandwidth broker. The central bandwidth broker conducts link-level allocations and allocates or de-allocates quotas to and from the path maintained by the edge bandwidth broker.
摘要翻译：一种用于在网络域内分配带宽的方法和装置。集中式带宽代理维护一个链路级数据库，其中包括网络域中各个链路的详细流量数据和包含网络域中各个路径的汇总流数据的路径级数据库。带宽代理通过基于流请求分配称为配额的离散量的带宽来确定路径级的带宽分配。如果通过分配配额不能满足流请求，则带宽代理使用链路级数据库从相同链路上的其他路径恢复未使用带宽的带宽，以满足流请求。在带宽代理的另一个实施例中，集中带宽代理由包括中央带宽代理和一个或多个边缘带宽代理的分布式带宽代理代替。边缘带宽代理进行路径级分配，并向中央带宽代理请求或释放配额。中央带宽代理进行链路级别分配，并向边缘带宽代理维护的路径分配或取消分配配额。

9. 发明授权

US08862726B1 Quantifying privacy leakage in mobile networks 有权
标题翻译：量化移动网络中的隐私泄漏
公开(公告)号：US08862726B1
公开(公告)日：2014-10-14
申请号：US13444525
申请日：2012-04-11
申请人： Han See Song , Yong Liao , Marios Iliofotou , Ning Xia , Zhi-Li Zhang , Aleksandar Kuzmanovic , Antonio Nucci
发明人： Han See Song , Yong Liao , Marios Iliofotou , Ning Xia , Zhi-Li Zhang , Aleksandar Kuzmanovic , Antonio Nucci
IPC分类号： G06F15/173 , G06F15/16
CPC分类号： H04W4/21 , H04L67/22 , H04W12/02
摘要： A method for profiling user activity in a mobile network, including extracting user identifiers from application sessions identified from a mobile network, analyzing the application sessions to determine session blocks based on shared IP address and a minimum separation time threshold, extracting a traffic marker from the session blocks based on a user identifier, identifying a first portion of the session blocks based on the user identifier, wherein the first portion is associated with first mobile network activities of a user identified by the user identifier, identifying a second portion of the session blocks based on the traffic marker, wherein the second portion is associated with second mobile network activities of the user, and analyzing the first portion and the second portion to determine a measure of a mobile network activity of the user.
摘要翻译：一种用于在移动网络中分析用户活动的方法，包括从从移动网络识别的应用会话中提取用户标识符，基于共享IP地址和最小间隔时间阈值分析应用会话以确定会话块，从基于用户标识符的会话块，基于所述用户标识符识别所述会话块的第一部分，其中所述第一部分与由所述用户标识符标识的用户的第一移动网络活动相关联，标识所述会话块的第二部分基于所述交通标记，其中所述第二部分与所述用户的第二移动网络活动相关联，并且分析所述第一部分和所述第二部分以确定所述用户的移动网络活动的度量。

10. 发明授权

US06691312B1 Multicasting video 有权
标题翻译：组播视频
公开(公告)号：US06691312B1
公开(公告)日：2004-02-10
申请号：US09527656
申请日：2000-03-17
申请人： Subhabrata Sen , Don Towsley , Zhi-Li Zhang , Jayanta Kumar Dey
发明人： Subhabrata Sen , Don Towsley , Zhi-Li Zhang , Jayanta Kumar Dey
IPC分类号： H04N7173
CPC分类号： H04N21/6405 , H04N7/165 , H04N21/23406 , H04N21/23418 , H04N21/2402 , H04N21/2662 , H04N21/64769
摘要： A method of multicasting video to multiple client nodes via intermediate nodes that includes accessing video information descriptive of the video to be multicast, accessing information describing a distribution tree of nodes from a source of the video to the multiple clients nodes via one or more internetwork nodes, accessing rate constraints of nodes in the distribution tree, accessing buffer allocations of the nodes in the distribution tree, and determining one or more smoothed transmission schedules for each node in the distribution tree based on the accessed video information, the accessed information describing the distribution tree, the accessed rate constraints of nodes in the distribution tree, and the accessed buffer allocations of the nodes in the distribution tree, the one or more transmission schedules describing the transmission of video data to one or more children nodes.
摘要翻译：一种经由中间节点将视频组播到多个客户端节点的方法，所述中间节点包括访问描述要组播的视频的视频信息，通过一个或多个互联节点访问描述节点的分布树从信息源到多个客户端节点的信息访问分布树中的节点的速率约束，访问分布树中的节点的缓冲器分配，以及基于所访问的视频信息确定分布树中每个节点的一个或多个平滑的传输调度，描述分布的所访问的信息树，分发树中的节点的访问速率约束以及分布树中节点的访问缓冲器分配，描述将视频数据传输到一个或多个子节点的一个或多个传输调度。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式