Transparent application-layer/os deeper packet inspector
Abstract
A computer-implemented method of deep packet inspection (DPI) in a network is provided. The method comprises collecting data packets comprising a number of traffic flows from a number of devices via a number of traffic taps and classifying each traffic flow according to data about network protocol layers of the packets comprising the traffic flow. Application layer metadata is extracted from the packets. Traffic flow classification data and the extracted metadata are ingested into a data cluster and normalized. The normalized classification data and extracted metadata is then correlated to other data sets.
- Inventors:
- Issue Date:
- Research Org.:
- Sandia National Lab. (SNL-NM), Albuquerque, NM (United States)
- Sponsoring Org.:
- USDOE
- OSTI Identifier:
- 1998490
- Patent Number(s):
- 11677668
- Application Number:
- 17/401,211
- Assignee:
- National Technology & Engineering Solutions of Sandia, LLC (Albuquerque, NM)
- DOE Contract Number:
- NA0003525
- Resource Type:
- Patent
- Resource Relation:
- Patent File Date: 08/12/2021
- Country of Publication:
- United States
- Language:
- English
Citation Formats
Urias, Vincent, Van Leeuwen, Brian P., and Stout, William M. S. Transparent application-layer/os deeper packet inspector. United States: N. p., 2023.
Web.
Urias, Vincent, Van Leeuwen, Brian P., & Stout, William M. S. Transparent application-layer/os deeper packet inspector. United States.
Urias, Vincent, Van Leeuwen, Brian P., and Stout, William M. S. Tue .
"Transparent application-layer/os deeper packet inspector". United States. https://www.osti.gov/servlets/purl/1998490.
@article{osti_1998490,
title = {Transparent application-layer/os deeper packet inspector},
author = {Urias, Vincent and Van Leeuwen, Brian P. and Stout, William M. S.},
abstractNote = {A computer-implemented method of deep packet inspection (DPI) in a network is provided. The method comprises collecting data packets comprising a number of traffic flows from a number of devices via a number of traffic taps and classifying each traffic flow according to data about network protocol layers of the packets comprising the traffic flow. Application layer metadata is extracted from the packets. Traffic flow classification data and the extracted metadata are ingested into a data cluster and normalized. The normalized classification data and extracted metadata is then correlated to other data sets.},
doi = {},
journal = {},
number = ,
volume = ,
place = {United States},
year = {2023},
month = {6}
}
Works referenced in this record:
Method and apparatus for monitoring traffic in a network
patent, November 2003
- Dietz, Russell S.; Maixner, Joseph R.; Koppenhaver, Andrew A.
- US Patent Document 6,651,099
Robust anomaly detection and regularized domain adaptation of classifiers with application to internet packet-flows
patent, May 2015
- Miller, David Brian; Kesidis, George; Raghuram, Jayaram
- US Patent Document 9,038,172
Pinning of Virtual Network Function (VNF) Deployments Using Hardware Metrics
patent-application, June 2018
- Stokes, Ian; Chilikin, Andrey
- US Patent Application 15/385561; 20180173547
Augmenting Flow Data for Improved Network Monitoring and Management
patent-application, December 2016
- Parandehgheibi, Ali; Attar, Mohammadreza Alizadeh; Madani, Omid
- US Patent Application 15/173210; 20160359740
Methodology to improve the anomaly detection rate
patent, January 2020
- Wang, Zhihu; Li, Tung-Min
- US Patent Document 10,541,903
Systems and methods for processing data flows
patent, March 2012
- Kapoor, Harsh; Akerman, Moisey; Justus, Stephen D.
- US Patent Document 8,135,657
Traffic Flow Classification Using Machine Learning
patent-application, July 2021
- Vasudevan, Sriram; Jain, Kaustubh; Su, Chi-Jiun
- US Patent Application 17/131646; 20210204152
Software redundancy for network functions
patent, January 2020
- Venkata, Suresh Kumar Vinapamula
- US Patent Document 10,545,778
Scalable Traffic Classifier and Classifier Training System
patent-application, February 2011
- Sen, Subhabrata; Duffield, Nicholas; Haffner, Patrick
- US Patent Application 12/539430; 20110040706
Systems and methods for rule-based anomaly detection on IP network flow
patent, February 2016
- Duffield, Nicholas; Haffner, Patrick; Krishnamurthy, Balachander
- US Patent Document 9,258,217
Application Characterization Using Transport Protocol Analysis
patent-application, May 2018
- Jain, Kaustubh; Su, Chi-Jiun
- US Patent Application 15/344684; 20180131593
Application signature generation and distribution
patent, March 2021
- Pasupathy, Thyagarajan S.; Manthena, Venkata Rama Raju; Chaubey, Rajeev
- US Patent Document 10,951,495
Scalable traffic classifier and classifier training system
patent, November 2012
- Sen, Subhabrata; Duffield, Nicholas; Haffner, Patrick
- US Patent Document 8,311,956
Processing data flows with a data flow processor
patent, October 2017
- Korsunsky, Yevgeny; Akerman, Moisey
- US Patent Document 9,800,608
Method and system for confident anomaly detection in computer network traffic
patent, December 2017
- Balabine, Igor; Velednitsky, Alexander
- US Patent Document 9,843,488
Application signature generation and distribution
patent, April 2019
- Pasupathy, Thyagarajan S.; Manthena, Venkata Rama Raju; Chaubey, Rajeev
- US Patent Document 10,250,466
Technologies for secure bootstrapping of virtual network functions
patent, February 2017
- Sood, Kapil; Walker, Jesse
- US Patent Document 9,578,008
Processing protocol specific information in packets specified by a protocol description language
patent, December 2003
- Dietz, Russell S.; Koppenhaver, Andrew A.; Torgerson, James F.
- US Patent Document 6,665,725
Technologies for Deploying Virtual Machines in a Virtual Network Function Infrastructure
patent-application, February 2019
- Connor, Patrick; Dubal, Scott; Pavlas, Chris
- US Patent Application 16/131012; 20190042297
Intelligent Cloud Platform to Host Resource Efficient Edge Network Function
patent-application, April 2021
- Joseph, Vimal Bastin Edwin; Subramaniam, Karthikeyan; Mahesh Hedathri, Parvathi
- US Patent Application 17/063627; 20210105228
System and method for identifying network applications
patent, May 2011
- Nucci, Antonio; Keralapura, Ram; Robinson, Joel R.
- US Patent Document 7,944,822