Invention Grant
- Patent Title: Detecting malicious endpoints using network connectivity and flow information
- Patent Title (中): 使用网络连接和流量信息检测恶意端点
-
Application No.: US13735196Application Date: 2013-01-07
-
Publication No.: US08813236B1Publication Date: 2014-08-19
- Inventor: Sabyasachi Saha , Lei Liu , Ruben Torres , Jianpeng Xu , Antonio Nucci
- Applicant: Narus, Inc.
- Applicant Address: US CA Sunnyvale
- Assignee: Narus, Inc.
- Current Assignee: Narus, Inc.
- Current Assignee Address: US CA Sunnyvale
- Agency: Fernandez & Associates, LLP
- Main IPC: G06F12/14
- IPC: G06F12/14 ; H04L29/06 ; H04L12/22 ; H04L9/00
Abstract:
A method for detecting hidden malicious network nodes. Starting from a pool of seed nodes that have previously been identified as malicious, a two-phase score propagation algorithm is employed to propagate threat scores from the seeded nodes to other nodes in an IP-address connectivity graph. Nodes with high threat score after propagation are declared to be malicious.
Information query
