专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08111626B2 Method and apparatus for providing statistical event correlation in a network 有权
标题翻译：用于在网络中提供统计事件相关性的方法和装置
公开(公告)号：US08111626B2
公开(公告)日：2012-02-07
申请号：US12347444
申请日：2008-12-31
申请人： Aman Shaikh , Cheng Ee , Ajay Mahimkar , Jia Wang , Jennifer Yates , Yin Zhang , Zihui Ge
发明人： Aman Shaikh , Cheng Ee , Ajay Mahimkar , Jia Wang , Jennifer Yates , Yin Zhang , Zihui Ge
IPC分类号： H04L12/26 , G01R31/08 , H04J1/16
CPC分类号： H04L41/0631
摘要： A method and apparatus for providing event correlation in a network are disclosed. For example, the method extracts a plurality of events of interest from a database, and creates one or more event time series from the plurality of events of interest, wherein each of the one or more event time series comprises a set of events of a same type and of a same location that occur within a given time period. The method forms one or more composite events from the one or more event time series, and performs one or more pair-wise correlations for at least one of: the event time-series, or the one or more composite events. The method then identifies one or more pair-wise correlations that are statistically significant.
摘要翻译：公开了一种在网络中提供事件相关性的方法和装置。例如，该方法从数据库提取多个感兴趣的事件，并且从多个感兴趣的事件中创建一个或多个事件时间序列，其中一个或多个事件时间序列中的每一个包括相同的一组事件类型和在给定时间段内发生的相同位置。所述方法形成来自所述一个或多个事件时间序列的一个或多个复合事件，并且对于所述事件时间序列或所述一个或多个复合事件中的至少一个执行一个或多个成对相关。然后，该方法识别统计学显着的一个或多个成对相关性。

2. 发明申请

US20090262650A1 METHOD AND APPARATUS FOR PROVIDING STATISTICAL EVENT CORRELATION IN A NETWORK 有权
标题翻译：在网络中提供统计事件相关性的方法和装置
公开(公告)号：US20090262650A1
公开(公告)日：2009-10-22
申请号：US12347444
申请日：2008-12-31
申请人： Aman Shaikh , Cheng Ee , Ajay Mahimkar , Jia Wang , Jennifer Yates , Yin Zhang , Zihui Ge
发明人： Aman Shaikh , Cheng Ee , Ajay Mahimkar , Jia Wang , Jennifer Yates , Yin Zhang , Zihui Ge
IPC分类号： H04L12/26
CPC分类号： H04L41/0631
摘要： A method and apparatus for providing event correlation in a network are disclosed. For example, the method extracts a plurality of events of interest from a database, and creates one or more event time series from the plurality of events of interest, wherein each of the one or more event time series comprises a set of events of a same type and of a same location that occur within a given time period. The method forms one or more composite events from the one or more event time series, and performs one or more pair-wise correlations for at least one of: the event time-series, or the one or more composite events. The method then identifies one or more pair-wise correlations that are statistically significant.
摘要翻译：公开了一种在网络中提供事件相关性的方法和装置。例如，该方法从数据库提取多个感兴趣的事件，并且从多个感兴趣的事件中创建一个或多个事件时间序列，其中一个或多个事件时间序列中的每一个包括相同的一组事件类型和在给定时间段内发生的相同位置。所述方法形成来自所述一个或多个事件时间序列的一个或多个复合事件，并且对于所述事件时间序列或所述一个或多个复合事件中的至少一个执行一个或多个成对相关。然后，该方法识别统计学显着的一个或多个成对相关性。

3. 发明申请

US20110013525A1 Indirect measurement methodology to infer routing changes using statistics of flow arrival processes 有权
标题翻译：使用统计流量到达过程来推断路由更改的间接测量方法
公开(公告)号：US20110013525A1
公开(公告)日：2011-01-20
申请号：US12460113
申请日：2009-07-14
申请人： Lee Breslau , Amogh Dhamdhere , Nicholas Duffield , Cheng Ee , Alexandre Gerber , Carsten Lund , Subhabrata Sen
发明人： Lee Breslau , Amogh Dhamdhere , Nicholas Duffield , Cheng Ee , Alexandre Gerber , Carsten Lund , Subhabrata Sen
IPC分类号： H04L12/26 , H04L12/56
CPC分类号： H04L43/18 , H04L43/062 , H04L45/70
摘要： Statistical methods are used to observe packet flow arrival processes and to infer routing changes from those observations. Packet flow arrivals are monitored using NetFlow or another packet flow monitoring arrangement. Packet flow arrivals are quantified by counting arrivals per unit time, or by measuring an inter-arrival time between flows. When a change in packet flow arrivals is determined to be statistically significant, a change in network routing protocol is reported.
摘要翻译：统计方法用于观察分组流到达过程，并从这些观察中推断出路由变化。使用NetFlow或另一个分组流监视装置来监视分组流到达。通过对每单位时间的到达时间进行计数，或通过测量流之间的到达之间的时间来量化分组流到达。当分组流到达的变化被确定为具有统计学意义时，报告了网络路由协议的变化。

4. 发明授权

US09191139B1 Systems and methods for reducing the computational resources for centralized control in a network 有权
标题翻译：减少网络集中控制的计算资源的系统和方法
公开(公告)号：US09191139B1
公开(公告)日：2015-11-17
申请号：US13494821
申请日：2012-06-12
申请人： Subbaiah Venkata , Barry Friedman , Cheng Ee
发明人： Subbaiah Venkata , Barry Friedman , Cheng Ee
IPC分类号： H04J11/00 , H04J14/00 , H04L12/715 , H04L12/713 , H04L12/721
CPC分类号： H04J11/00 , H04J11/0066 , H04J14/00 , H04L12/6418 , H04L45/04 , H04L45/586 , H04L45/62
摘要： A network system that reduces the computational resources to centrally-control network nodes in a border gateway protocol (BGP) network. More particularly, the systems and methods describe the control of a plurality of individual network nodes by a centralized controller, and the use of a route control server (RCS), which is connected to the centralized controller, or OpenFlow Controller (OFC). By treating the plurality of individual network nodes as a single combined network node, the route control server is able communicate using a single BGP speaker, and hence, reduce the computational resources from that required to run an individual BGP speaker for each individual network node.
摘要翻译：一种减少计算资源以集中控制边界网关协议（BGP）网络中的网络节点的网络系统。更具体地，系统和方法描述了由集中式控制器对多个单独网络节点的控制，以及使用连接到集中控制器或OpenFlow控制器（OFC）的路由控制服务器（RCS）。通过将多个单独的网络节点视为单个组合网络节点，路由控制服务器能够使用单个BGP扬声器进行通信，并且因此从为每个单独网络节点运行单独的BGP发言者所需的计算资源减少。

5. 发明授权

US08477772B2 System and method for determination of routing information in a network 有权
标题翻译：用于确定网络中路由信息的系统和方法
公开(公告)号：US08477772B2
公开(公告)日：2013-07-02
申请号：US12335868
申请日：2008-12-16
申请人： Alexandre Gerber , Lee Breslau , Subhabrata Sen , Nicholas Duffield , Carsten Lund , Cheng Ee , Amogh Dhamdhere
发明人： Alexandre Gerber , Lee Breslau , Subhabrata Sen , Nicholas Duffield , Carsten Lund , Cheng Ee , Amogh Dhamdhere
IPC分类号： H04L12/56
CPC分类号： H04L12/56 , H04L41/12 , H04L45/70
摘要： A system and method to use network flow records to generate information about changes in network routing and to understand the impact of these changes on network traffic. The inferences made can be determinative, if sufficient information is available. If sufficient information is not available to make determinative inferences, inferences may be made that narrow the range of possible changes that may have occurred to network traffic and the underlying network.
摘要翻译：一种使用网络流记录生成有关网络路由更改的信息并了解这些更改对网络流量的影响的系统和方法。如果有足够的信息可用，所做的推论可以是决定性的。如果没有足够的信息可用于作出决定性推论，可以推测可能缩小网络流量和底层网络可能发生的可能变化的范围。

6. 发明授权

US07957315B2 System and method for sampling network traffic 有权
标题翻译：系统和方法对网络流量进行采样
公开(公告)号：US07957315B2
公开(公告)日：2011-06-07
申请号：US12342957
申请日：2008-12-23
申请人： Nicholas Duffield , Lee M. Breslau , Cheng Ee , Alexandre Gerber , Carsten Lund , Subhabrata Sen
发明人： Nicholas Duffield , Lee M. Breslau , Cheng Ee , Alexandre Gerber , Carsten Lund , Subhabrata Sen
IPC分类号： H04L12/26
CPC分类号： H04L43/04 , H04L43/022 , H04L43/026 , H04L43/062
摘要： Disclosed herein are systems, computer-implemented methods, and computer-readable media for sampling network traffic. The method includes receiving a plurality of flow records, calculating a hash for each flow record based on one or more invariant part of a respective flow, generating a quasi-random number from the calculated hash for each respective flow record, and sampling flow records having a quasi-random number below a probability P. Invariant parts of flow records include destination IP address, source IP address, TCP/UDP port numbers, TCP flags, and network protocol. A plurality of routers can uniformly calculate hashes for flow records. Each router in a plurality of routers can generate a same quasi-random number for each respective flow record and uses different values for probability P. The probability P can depend on a flow size. The method can divide the quasi-random number by a maximum possible hash value.
摘要翻译：本文公开了系统，计算机实现的方法和用于对网络业务进行采样的计算机可读介质。该方法包括：接收多个流记录，基于相应流的一个或多个不变部分计算每个流记录的散列，从针对每个相应流记录的计算出的散列生成准随机数，以及对具有低于概率P的准随机数。流记录的不变部分包括目的地IP地址，源IP地址，TCP / UDP端口号，TCP标志和网络协议。多个路由器可以统一计算流记录的哈希值。多个路由器中的每个路由器可以为每个相应的流记录生成相同的准随机数，并对概率P使用不同的值。概率P可以取决于流量大小。该方法可以将准随机数除以最大可能的哈希值。

7. 发明授权

US08064359B2 System and method for spatially consistent sampling of flow records at constrained, content-dependent rates 有权
标题翻译：以受限制的，依赖内容的速率对流记录进行空间一致采样的系统和方法
公开(公告)号：US08064359B2
公开(公告)日：2011-11-22
申请号：US12343007
申请日：2008-12-23
申请人： Nicholas Duffield , Lee M. Breslau , Cheng Ee , Alexandre Gerber , Carsten Lund , Subhabrata Sen
发明人： Nicholas Duffield , Lee M. Breslau , Cheng Ee , Alexandre Gerber , Carsten Lund , Subhabrata Sen
IPC分类号： H04L12/26
CPC分类号： H04L43/026 , H04L43/024 , Y02D50/30
摘要： Disclosed herein are systems, computer-implemented methods, and computer-readable media for sampling network traffic. The method includes receiving a desired quantity of flow record to sample, receiving a plurality of network flow record each summarizing a network flow of packets, calculating a hash for each flow record of based on one or more invariant part of a respective flow, generating a quasi-random number from the calculated hash for each respective flow record, generating a priority from the calculated hash for each respective flow record, and sampling exactly the desired quantity of flow records, selecting flow records having a highest priority first. In one aspect, the method further partitions the plurality of flow records into groups based on flow origin and destination, generates an individual priority for each partitioned group, and separately samples exactly the desired quantity of flow records from each partitioned group, selecting flows having a highest individual priority first.
摘要翻译：本文公开了系统，计算机实现的方法和用于对网络业务进行采样的计算机可读介质。该方法包括接收所需数量的流记录到采样中，接收多个网络流记录，每个汇总分组的网络流，基于相应流的一个或多个不变部分计算每个流记录的散列，从每个相应流记录的计算散列中产生准随机数，从每个相应流记录的计算散列生成优先级，并精确地采样所需数量的流记录，首先选择具有最高优先级的流记录。在一个方面，该方法还基于流源和目的地进一步将多个流记录划分为组，为每个分区组生成一个单独的优先级，并且从每个分区组中分别精确地采集所需数量的流记录，选择具有最高个人优先。

8. 发明申请

US20100161791A1 SYSTEM AND METHOD FOR SAMPLING NETWORK TRAFFIC 有权
标题翻译：用于采集网络交通的系统和方法
公开(公告)号：US20100161791A1
公开(公告)日：2010-06-24
申请号：US12342957
申请日：2008-12-23
申请人： Nicholas Duffield , Lee M. Breslau , Cheng Ee , Alexandre Gerber , Carsten Lund , Subhabrata Sen
发明人： Nicholas Duffield , Lee M. Breslau , Cheng Ee , Alexandre Gerber , Carsten Lund , Subhabrata Sen
IPC分类号： G06F15/173
CPC分类号： H04L43/04 , H04L43/022 , H04L43/026 , H04L43/062
摘要： Disclosed herein are systems, computer-implemented methods, and computer-readable media for sampling network traffic. The method includes receiving a plurality of flow records, calculating a hash for each flow record based on one or more invariant part of a respective flow, generating a quasi-random number from the calculated hash for each respective flow record, and sampling flow records having a quasi-random number below a probability P. Invariant parts of flow records include destination IP address, source IP address, TCP/UDP port numbers, TCP flags, and network protocol. A plurality of routers can uniformly calculate hashes for flow records. Each router in a plurality of routers can generate a same quasi-random number for each respective flow record and uses different values for probability P. The probability P can depend on a flow size. The method can divide the quasi-random number by a maximum possible hash value.
摘要翻译：本文公开了系统，计算机实现的方法和用于对网络业务进行采样的计算机可读介质。该方法包括：接收多个流记录，基于相应流的一个或多个不变部分计算每个流记录的散列，从针对每个相应流记录的计算出的散列生成准随机数，以及对具有低于概率P的准随机数。流记录的不变部分包括目的地IP地址，源IP地址，TCP / UDP端口号，TCP标志和网络协议。多个路由器可以统一计算流记录的哈希值。多个路由器中的每个路由器可以为每个相应的流记录生成相同的准随机数，并对概率P使用不同的值。概率P可以取决于流量大小。该方法可以将准随机数除以最大可能的哈希值。

9. 发明授权

US08165019B2 Indirect measurement methodology to infer routing changes using statistics of flow arrival processes 有权
标题翻译：使用统计流量到达过程来推断路由更改的间接测量方法
公开(公告)号：US08165019B2
公开(公告)日：2012-04-24
申请号：US12460113
申请日：2009-07-14
申请人： Lee Breslau , Amogh Dhamdhere , Nicholas Duffield , Cheng Ee , Alexandre Gerber , Carsten Lund , Subhabrata Sen
发明人： Lee Breslau , Amogh Dhamdhere , Nicholas Duffield , Cheng Ee , Alexandre Gerber , Carsten Lund , Subhabrata Sen
IPC分类号： H04L12/26 , H04L12/56
CPC分类号： H04L43/18 , H04L43/062 , H04L45/70
摘要： Statistical methods are used to observe packet flow arrival processes and to infer routing changes from those observations. Packet flow arrivals are monitored using NetFlow or another packet flow monitoring arrangement. Packet flow arrivals are quantified by counting arrivals per unit time, or by measuring an inter-arrival time between flows. When a change in packet flow arrivals is determined to be statistically significant, a change in network routing protocol is reported.
摘要翻译：统计方法用于观察分组流到达过程，并从这些观察中推断出路由变化。使用NetFlow或另一个分组流监视装置来监视分组流到达。通过对每单位时间的到达时间进行计数，或通过测量流之间的到达之间的时间来量化分组流到达。当分组流到达的变化被确定为具有统计学意义时，报告了网络路由协议的变化。

10. 发明申请

US20100157809A1 SYSTEM AND METHOD FOR SPATIALLY CONSISTENT SAMPLING OF FLOW RECORDS AT CONSTRAINED, CONTENT-DEPENDENT RATES 有权
标题翻译：流量记录的空间一致采样的系统和方法在受约束的内容依赖率
公开(公告)号：US20100157809A1
公开(公告)日：2010-06-24
申请号：US12343007
申请日：2008-12-23
申请人： Nicholas Duffield , Lee M. Breslau , Cheng Ee , Alexandre Gerber , Carsten Lund , Subhabrata Sen
发明人： Nicholas Duffield , Lee M. Breslau , Cheng Ee , Alexandre Gerber , Carsten Lund , Subhabrata Sen
IPC分类号： G06F11/30
CPC分类号： H04L43/026 , H04L43/024 , Y02D50/30
摘要： Disclosed herein are systems, computer-implemented methods, and computer-readable media for sampling network traffic. The method includes receiving a desired quantity of flow record to sample, receiving a plurality of network flow record each summarizing a network flow of packets, calculating a hash for each flow record of based on one or more invariant part of a respective flow, generating a quasi-random number from the calculated hash for each respective flow record, generating a priority from the calculated hash for each respective flow record, and sampling exactly the desired quantity of flow records, selecting flow records having a highest priority first. In one aspect, the method further partitions the plurality of flow records into groups based on flow origin and destination, generates an individual priority for each partitioned group, and separately samples exactly the desired quantity of flow records from each partitioned group, selecting flows having a highest individual priority first.
摘要翻译：本文公开了系统，计算机实现的方法和用于对网络业务进行采样的计算机可读介质。该方法包括接收所需数量的流记录到采样中，接收多个网络流记录，每个汇总分组的网络流，基于相应流的一个或多个不变部分计算每个流记录的散列，从每个相应流记录的计算散列中产生准随机数，从每个相应流记录的计算散列生成优先级，并精确地采样所需数量的流记录，首先选择具有最高优先级的流记录。在一个方面，该方法还基于流源和目的地进一步将多个流记录划分为组，为每个分区组生成一个单独的优先级，并且从每个分区组中分别精确地采集所需数量的流记录，选择具有最高个人优先。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式