Transparent application-layer/os deeper packet inspector

Patent · Tue Jun 13 00:00:00 EDT 2023

OSTI ID:1998490

Urias, Vincent; Van Leeuwen, Brian P.; Stout, William M. S.

A computer-implemented method of deep packet inspection (DPI) in a network is provided. The method comprises collecting data packets comprising a number of traffic flows from a number of devices via a number of traffic taps and classifying each traffic flow according to data about network protocol layers of the packets comprising the traffic flow. Application layer metadata is extracted from the packets. Traffic flow classification data and the extracted metadata are ingested into a data cluster and normalized. The normalized classification data and extracted metadata is then correlated to other data sets.

• Research Organization: Sandia National Laboratories (SNL-NM), Albuquerque, NM (United States)
• Sponsoring Organization: USDOE
• DOE Contract Number: NA0003525
• Assignee: National Technology & Engineering Solutions of Sandia, LLC (Albuquerque, NM)
• Patent Number(s): 11,677,668
• Application Number: 17/401,211
• OSTI ID: 1998490
• Country of Publication: United States
• Language: English