Invention Grant
- Patent Title: Systems and methods for detecting transactional message sequences that are obscured in multicast communications
-
Application No.: US15194337Application Date: 2016-06-27
-
Publication No.: US10091077B1Publication Date: 2018-10-02
- Inventor: Michael Pukish , Minjie Qiu , Shankar Somasundaram
- Applicant: Symantec Corporation
- Applicant Address: US CA Mountain View
- Assignee: Symantec Corporation
- Current Assignee: Symantec Corporation
- Current Assignee Address: US CA Mountain View
- Agency: FisherBroyles, LLP
- Main IPC: G06F15/173
- IPC: G06F15/173 ; H04L12/26 ; H04L12/18 ; H04L29/08 ; H04L29/06

Abstract:
The disclosed computer-implemented method for detecting transactional message sequences that are obscured in multicast communications may include (i) collecting a sequence of messages that were distributed on a communication channel and that include an obscured cyclic sequence of request-response messages that are interleaved in the sequence of messages, (ii) constructing a sequence graph from the sequence of messages by (a) adding, for each unique message identifier in the sequence of messages, a node to represent the unique message identifier and (b) adding, for each unique sequence transition in the sequence of messages from an immediately-preceding message to an immediately-succeeding message, an edge to connect the nodes that represent the identifiers of the unique sequence transition's immediately-preceding and immediately-succeeding messages, (iii) traversing the sequence graph to discover the obscured cyclic sequence of request-response messages, and (iv) performing a security action. Various other methods, systems, and computer-readable media are also disclosed.
Information query