首页>
外国专利>
Identification of potential network threats using a distributed threshold random walk
Identification of potential network threats using a distributed threshold random walk
展开▼
机译:使用分布式阈值随机游动识别潜在的网络威胁
展开▼
页面导航
摘要
著录项
相似文献
摘要
In general, the invention is directed to techniques of identifying an infected network device in a computer network where traffic to and from the infected network device is not necessarily routed through a single point on the computer network. For example, individual line cards in network devices count incoming network flows from network devices in host tables. The host tables of all line cards of all participating network devices are then correlated. It is then determined whether the number of flows from a network device outweighs the number of flows to the network device to a significant degree. If so, the network device may be considered suspicious. Packets from a suspicious network device may be rerouted to a network security device for more thorough inspection.
展开▼