DOE Patents title logo U.S. Department of Energy
Office of Scientific and Technical Information

Title: Path scanning for the detection of anomalous subgraphs and use of DNS requests and host agents for anomaly/change detection and network situational awareness

Inventors:
; ; ; ; ; ;
Issue Date:
Research Org.:
Los Alamos National Lab. (LANL), Los Alamos, NM (United States)
Sponsoring Org.:
USDOE
OSTI Identifier:
1341795
Patent Number(s):
9560065
Application Number:
14/382,992
Assignee:
Los Alamos National Security, LLC (Los Alamos, NM)
Patent Classifications (CPCs):
G - PHYSICS G06 - COMPUTING G06F - ELECTRIC DIGITAL DATA PROCESSING
H - ELECTRICITY H04 - ELECTRIC COMMUNICATION TECHNIQUE H04L - TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
DOE Contract Number:  
AC52-06NA25396
Resource Type:
Patent
Resource Relation:
Patent File Date: 2013 Mar 14
Country of Publication:
United States
Language:
English
Subject:
97 MATHEMATICS AND COMPUTING

Citation Formats

Neil, Joshua Charles, Fisk, Michael Edward, Brugh, Alexander William, Hash, Jr., Curtis Lee, Storlie, Curtis Byron, Uphoff, Benjamin, and Kent, Alexander. Path scanning for the detection of anomalous subgraphs and use of DNS requests and host agents for anomaly/change detection and network situational awareness. United States: N. p., 2017. Web.
Neil, Joshua Charles, Fisk, Michael Edward, Brugh, Alexander William, Hash, Jr., Curtis Lee, Storlie, Curtis Byron, Uphoff, Benjamin, & Kent, Alexander. Path scanning for the detection of anomalous subgraphs and use of DNS requests and host agents for anomaly/change detection and network situational awareness. United States.
Neil, Joshua Charles, Fisk, Michael Edward, Brugh, Alexander William, Hash, Jr., Curtis Lee, Storlie, Curtis Byron, Uphoff, Benjamin, and Kent, Alexander. Tue . "Path scanning for the detection of anomalous subgraphs and use of DNS requests and host agents for anomaly/change detection and network situational awareness". United States. https://www.osti.gov/servlets/purl/1341795.
@article{osti_1341795,
title = {Path scanning for the detection of anomalous subgraphs and use of DNS requests and host agents for anomaly/change detection and network situational awareness},
author = {Neil, Joshua Charles and Fisk, Michael Edward and Brugh, Alexander William and Hash, Jr., Curtis Lee and Storlie, Curtis Byron and Uphoff, Benjamin and Kent, Alexander},
abstractNote = {},
doi = {},
journal = {},
number = ,
volume = ,
place = {United States},
year = {2017},
month = {1}
}

Works referenced in this record:

Features generation for use in computer network intrusion detection
patent, December 2003


Anomaly detection
patent, March 2008


Intrusion detection system
patent, October 2009


Attack graph aggregation
patent, December 2009


Distributed network management
patent, December 2011


Method and system for content distribution network security
patent, March 2013


Using social graphs to combat malicious attacks
patent, April 2013


Wireless network edge guardian
patent, November 2013


Proactive on-line diagnostics in a manageable network
patent-application, February 2002


Method and apparatus for verifying the integrity and security of computer networks and implementing counter measures
patent-application, November 2002


Flow-based detection of network intrusions
patent-application, June 2003


Detect and qualify relationships between people and find the best path through the resulting social network
patent-application, June 2004


Network security monitoring system
patent-application, July 2004


Adaptive behavioral intrusion detection systems and methods
patent-application, February 2005


Database user behavior monitor system and method
patent-application, September 2005


Method and system for analyzing multidimensional data
patent-application, March 2006


Systems and methods for testing and evaluating an intrusion detection system
patent-application, November 2006


Tactical And Strategic Attack Detection And Prediction
patent-application, September 2007


Method of Detecting Anomalous Behaviour in a Computer Network
patent-application, October 2007


Traffic Control System And Management Server
patent-application, April 2008


Methods and Systems for Determining Entropy Metrics for Networks
patent-application, January 2009


Systems And Methods For A Simulated Network Attack Generator
patent-application, December 2009


Intrusion Event Correlation System
patent-application, July 2010


Method And Apparatus For Network Anomaly Detection
patent-application, November 2010


Apparatuses And Methods For Detecting Anomalous Event In Network
patent-application, June 2011


Device and Method for Detecting and Diagnosing Correlated Network Anomalies
patent-application, June 2011


Generating A Multiple-Prerequisite Attack Graph
September 2011


Applying Antimalware Logic without Revealing the Antimalware Logic to Adversaries
patent-application, December 2012


Systems and Methods for Virtualized Malware Detection
patent-application, May 2013


Method And Apparatus For Machine To Machine Network Security Monitoring In A Communications Network
patent-application, May 2013


Predicting Attacks Based On Probabilistic Game-Theory
patent-application, November 2013


System and Method for Assessing Whether a Communication Contains an Attack
patent-application, February 2014


Method For Detecting Anomaly Action Within A Computer Network
patent-application, June 2014


Probabilistic Alert Correlation
book, January 2001


Scan Statistics on Enron Graphs
journal, October 2005


The link-prediction problem for social networks
journal, January 2007

  • Liben-Nowell, David; Kleinberg, Jon
  • Journal of the American Society for Information Science and Technology, Vol. 58, Issue 7, p. 1019-1031
  • https://doi.org/10.1002/asi.20591