System and method for characterizing network traffic
US9832140B2 · kind B2 · utility
Assignee
Inventor
Key dates
| Filing date | Feb 20, 2015 |
| Grant date | Nov 28, 2017 |
| Priority date | — |
| Expiry date | Jan 27, 2036 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L43/062
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A system monitors first traffic and identifies associations between applications that generated or received the traffic and parameters such as domain names, a remote host, and a local host referenced in the traffic. Subsequent traffic is monitored and determined to be generated by or addressed to an application according to such parameters in the subsequent traffic, such as remote host, local host, domain name, or port number. The subsequent traffic is associated with an application without requiring deep packet inspection (DPI). In particular, an application may be associated with a session based on evaluation of a single packet of the session.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.