DOE Patents title logo U.S. Department of Energy
Office of Scientific and Technical Information

Title: Transparent application-layer/os deeper packet inspector

Abstract

A computer-implemented method of deep packet inspection (DPI) in a network is provided. The method comprises collecting data packets comprising a number of traffic flows from a number of devices via a number of traffic taps and classifying each traffic flow according to data about network protocol layers of the packets comprising the traffic flow. Application layer metadata is extracted from the packets. Traffic flow classification data and the extracted metadata are ingested into a data cluster and normalized. The normalized classification data and extracted metadata is then correlated to other data sets.

Inventors:
; ;
Issue Date:
Research Org.:
Sandia National Lab. (SNL-NM), Albuquerque, NM (United States)
Sponsoring Org.:
USDOE
OSTI Identifier:
1998490
Patent Number(s):
11677668
Application Number:
17/401,211
Assignee:
National Technology & Engineering Solutions of Sandia, LLC (Albuquerque, NM)
DOE Contract Number:  
NA0003525
Resource Type:
Patent
Resource Relation:
Patent File Date: 08/12/2021
Country of Publication:
United States
Language:
English

Citation Formats

Urias, Vincent, Van Leeuwen, Brian P., and Stout, William M. S. Transparent application-layer/os deeper packet inspector. United States: N. p., 2023. Web.
Urias, Vincent, Van Leeuwen, Brian P., & Stout, William M. S. Transparent application-layer/os deeper packet inspector. United States.
Urias, Vincent, Van Leeuwen, Brian P., and Stout, William M. S. Tue . "Transparent application-layer/os deeper packet inspector". United States. https://www.osti.gov/servlets/purl/1998490.
@article{osti_1998490,
title = {Transparent application-layer/os deeper packet inspector},
author = {Urias, Vincent and Van Leeuwen, Brian P. and Stout, William M. S.},
abstractNote = {A computer-implemented method of deep packet inspection (DPI) in a network is provided. The method comprises collecting data packets comprising a number of traffic flows from a number of devices via a number of traffic taps and classifying each traffic flow according to data about network protocol layers of the packets comprising the traffic flow. Application layer metadata is extracted from the packets. Traffic flow classification data and the extracted metadata are ingested into a data cluster and normalized. The normalized classification data and extracted metadata is then correlated to other data sets.},
doi = {},
journal = {},
number = ,
volume = ,
place = {United States},
year = {2023},
month = {6}
}

Works referenced in this record:

Method and apparatus for monitoring traffic in a network
patent, November 2003


Pinning of Virtual Network Function (VNF) Deployments Using Hardware Metrics
patent-application, June 2018


Augmenting Flow Data for Improved Network Monitoring and Management
patent-application, December 2016


Methodology to improve the anomaly detection rate
patent, January 2020


Systems and methods for processing data flows
patent, March 2012


Traffic Flow Classification Using Machine Learning
patent-application, July 2021


Software redundancy for network functions
patent, January 2020


Scalable Traffic Classifier and Classifier Training System
patent-application, February 2011


Systems and methods for rule-based anomaly detection on IP network flow
patent, February 2016


Application Characterization Using Transport Protocol Analysis
patent-application, May 2018


Application signature generation and distribution
patent, March 2021


Scalable traffic classifier and classifier training system
patent, November 2012


Processing data flows with a data flow processor
patent, October 2017


Application signature generation and distribution
patent, April 2019


Processing protocol specific information in packets specified by a protocol description language
patent, December 2003


Technologies for Deploying Virtual Machines in a Virtual Network Function Infrastructure
patent-application, February 2019


Intelligent Cloud Platform to Host Resource Efficient Edge Network Function
patent-application, April 2021


System and method for identifying network applications
patent, May 2011