Encoding of signals to facilitate traffic analysis
원문보기
IPC분류정보
국가/구분
United States(US) Patent
등록
국제특허분류(IPC7판)
H04L-029/06
H04L-012/66
H04J-003/06
G06F-015/16
H04Q-011/00
출원번호
UP-0212324
(2002-08-05)
등록번호
US-7574597
(2009-08-25)
발명자
/ 주소
Cousins, David B.
Partridge, Craig
Strayer, W. Timothy
Krishnan, Rajesh
Saxena, Tushar
출원인 / 주소
BBN Technologies Corp.
대리인 / 주소
Ropes & Gray LLP
인용정보
피인용 횟수 :
0인용 특허 :
93
초록▼
A system acquires information about communication among wired or wireless nodes [110, 210] in a network [100, 200] by intercepting chunks of data in the network by a wired or wireless tap [120, 220] located among the wired or wireless nodes [110, 210] in the network. Characteristic information [400]
A system acquires information about communication among wired or wireless nodes [110, 210] in a network [100, 200] by intercepting chunks of data in the network by a wired or wireless tap [120, 220] located among the wired or wireless nodes [110, 210] in the network. Characteristic information [400] about the intercepted chunks of data may be obtained. The characteristic information may include times of arrival [410] of the chunks of data at the wired or wireless tap [120, 220] and identifiers of wired or wireless source nodes [420] that sent the chunks of data. At least one signal may be constructed to represent the characteristic information over time.
대표청구항▼
What is claimed is: 1. A method of acquiring information about communication among nodes in a network, comprising: intercepting chunks of data in the network by a tap located among the nodes in the network; directly obtaining first characteristic information about the intercepted chunks of data, th
What is claimed is: 1. A method of acquiring information about communication among nodes in a network, comprising: intercepting chunks of data in the network by a tap located among the nodes in the network; directly obtaining first characteristic information about the intercepted chunks of data, the first characteristic information including times of arrival of the chunks of data at the tap and identifiers of source nodes that sent the chunks of data; recording the first characteristic information in a record; indirectly determining second characteristic information about the intercepted chunks of data based on at least some of the first characteristic information; and constructing, using one of a plurality of encoding schemes based on at least one of a recorded amount of the first characteristic information or a usability of the first characteristic information in subsequent signal processing, at least one signal to represent the first and second characteristic information over time. 2. The method of claim 1, where the first characteristic information further includes at least one of durations of the chunks of data or identifiers of destination nodes to which the chunks of data are addressed, and the second characteristic data includes a type of the chunks of data. 3. The method of claim 1, where the network is a wireless network, and the tap is capable of intercepting wireless communications. 4. The method of claim 1, where the network is a wired network, and the tap is capable of intercepting communications on the wired network. 5. The method of claim 1, where the constructing includes: encoding one signal that includes the times of arrival of the chunks of data and the identifiers of the source nodes. 6. The method of claim 5, where the encoding includes: assigning phase information to data associated with the times of arrival of the chunks of data based on the identifiers of the source nodes. 7. The method of claim 6, where the phase information is a sign of the data associated with the times of arrival when there are two different source nodes identified by the identifiers of the source nodes. 8. The method of claim 1, where the constructing includes: encoding a plurality of signals using the identifiers of source nodes so that each one of the plurality of signals includes the times of arrival of the chunks of data sent by a single source node. 9. The method of claim 8, where the plurality of signals each consists of the times of arrival of the chunks of data sent by a single source node. 10. The method of claim 1, further comprising: re-sampling the at least one signal so that the first characteristic information is sampled at uniform periods of time. 11. The method of claim 1, further comprising: processing the at least one signal to obtain periodicity information about the at least one signal. 12. The method of claim 1, where the at least one signal includes a plurality of signals, and the method further comprises: processing the plurality of signals to obtain similarity information about pairs of the plurality of signals. 13. A method of acquiring information about communication among nodes in a network, comprising: passively observing chunks of data in the network by a tap located among the nodes in the network; obtaining characteristic information about the chunks of data, the characteristic information including a number of different types of information, including times of arrival of the chunks of data at the tap and durations of the chunks of data; and constructing, using one of a plurality of encoding schemes based on at least one of the number of different types of the information or a usability of the characteristic information in subsequent signal processing, at least one signal to represent the characteristic information over time. 14. The method of claim 13, where the characteristic information further includes at least one of identifiers of source nodes that sent the chunks of data or identifiers of destination nodes to which the chunks of data are addressed. 15. The method of claim 13, where the network is a wireless network, and the tap is capable of observing wireless communications. 16. The method of claim 13, where the network is a wired network, and the tap is capable of observing communications on the wired network. 17. The method of claim 13, where the characteristic information further includes identifiers of source nodes that sent the chunks of data, and where the constructing includes: encoding one signal that includes the times of arrival of the chunks of data and the durations of the chunks of data for all of the source nodes corresponding to the identifiers. 18. The method of claim 13, where the characteristic information further includes identifiers of source nodes that sent the chunks of data, and where the constructing includes: encoding a plurality of signals using the identifiers of source nodes so that each one of the plurality of signals includes the times of arrival of the chunks of data and the durations of the chunks of data sent by a single one of the source nodes. 19. The method of claim 13, where the constructing includes: encoding the durations of the chunks of data as amplitudes of data within the at least one signal. 20. The method of claim 13, where the constructing includes: encoding the durations of the chunks of data as lengths of data within the at least one signal. 21. The method of claim 13, further comprising: re-sampling the at least one signal so that the characteristic information is sampled at uniform periods of time. 22. The method of claim 13, further comprising: processing the at least one signal to obtain periodicity information about the at least one signal. 23. A method of acquiring information about communication among nodes in a network, comprising: intercepting chunks of data in the network by a tap located among the nodes in the network; obtaining characteristic information about the intercepted chunks of data, the characteristic information including times of arrival of the chunks of data at the tap, durations of the chunks of data, and identifiers of source nodes that sent the chunks of data; inferring a type of the chunks of data based on at least some of the characteristic information; and encoding the type of the chunks of data and the characteristic information as pulses of at least one signal, where the type of the chunks of data or the characteristic information is encoded as amplitudes of data with the at least one signal. 24. The method of claim 23, where the constructing includes: encoding the times of arrival of the chunks as impulses or pulses. 25. The method of claim 24, where the encoding includes: assigning a sign to the impulses or pulses based on which source node sent the chunks. 26. The method of claim 23, where the characteristic information further includes identifiers of destination nodes to which the chunks of data are addressed. 27. A computer-readable storage device that stores instructions executable by one or more processors to perform a method for acquiring information about communication in a network, comprising: instructions for detecting chunks of data in the network by a tap located among the nodes in the network; instructions for obtaining times of arrival of the chunks of data at the tap; instructions for obtaining identifiers of source nodes that sent the chunks of data; instructions for determining a type of the chunks of data based on at least some of the obtained times of arrival and identifiers of source nodes; and instructions for constructing at least one signal to represent the type of the chunks of data, the times of arrival of the chunks of data, and the identifiers of source nodes, over time. 28. The computer-readable storage device of claim 27, where the instructions for constructing include: instructions for encoding a one dimensional signal that includes the times of arrival of the chunks of data and the identifiers of the source nodes. 29. The computer-readable storage device of claim 27, where the instructions for constructing include: instructions for encoding a plurality of signals using the identifiers of source nodes so that each one of the plurality of signals includes the times of arrival of the chunks of data sent by a single source node. 30. A communication tap in a network, comprising: means for detecting chunks of data in the network; means for determining time of arrival information for the chunks of data; means for determining sizes of the chunks of data; means for determining types of the chunks of data based on the determined time of arrival information for the chunks of data and the determined sizes of the chunks of data; and means for constructing at least one signal to represent the types of the chunks of data, the times of arrival of the chunks of data and the sizes of the chunks of data over time.
연구과제 타임라인
LOADING...
LOADING...
LOADING...
LOADING...
LOADING...
이 특허에 인용된 특허 (93)
Bahadiroglu,Murat I., Adaptive control of data packet size in networks.
Lotito Lawrence A. (6625 Springpark Ave. Los Angeles CA 90056) Huxford Teresa D. (1822 Pandora Ave. ; #3 Los Angeles CA 90025) Donaldson Ann L. (2321 W. 232nd St. Torrance CA 90501), Automated telephone voice service system.
Raab Ilan ; Manghirmalani Ravi ; Doitel Ofer ; Izbicki Lynne Marie, Method and apparatus for automatically configuring a network device to support a virtual network.
Tsutomu Shimomura ; Steve Waltman ; Mark Peting ; Castor Fu ; Dag H. Johansen ; Geoff Mulligan, Method and apparatus for broadcasting data with access control.
Silvano Gai ; Keith McCloghrie ; Shai Mohaban, Method and apparatus for identifying network data traffic flows and for applying quality of service treatments to the flows.
Ramakrishnan Kajamalai G. (Berkeley Heights NJ) Rodrigues Manoel A. (Atlantic Highlands NJ), Method and apparatus for routing and link metric assignment in shortest path networks.
Merchant, Shashank; Williams, Robert; Chiang, John M.; Yu, Ching, Method and apparatus in a network switch for handling link failure and link recovery in a trunked data path.
Farley,Timothy P.; Hammer,John M.; Williams,Bryan Douglas; Brass,Philip Charles; Young,George C.; Mezack,Derek John, Method and system for managing computer security information.
Ahuja, Abha; Ayers, Matt; Black, Ben; Brown, Chris; Cohn, Daniel T.; Ramsey, Stephen; Ronen, Ophir; Schachter, Paul J.; Stiffelman, Oscar B.; Wheeler, Christopher D., Method and system for optimizing routing through multiple available internet route providers.
Partridge,Craig; Strayer,William Timothy; Cousins,David Bruce, Method and system for passively analyzing communication data based on frequency analysis of encrypted data traffic, and method and system for deterring passive analysis of communication data.
Schwaller Peter James ; Walker II John Quillian ; Joyce Steven Thomas ; Huntley Timothy Scott, Methods, systems and computer program products for endpoint pair based communications network performance testing.
Schwaller Peter James ; Walker ; II John Quillian ; Joyce Steven Thomas ; Huntley Timothy Scott, Methods, systems and computer program products for test scenario based communications network performance testing.
McMillen Robert J. ; Watson M. Cameron ; Chura David J., Multistage interconnect network uses a master processor to perform dynamic configuration for all switch nodes based on a predetermined topology.
Witkowski, Michael L.; Mayer, Dale J.; Walker, William J.; Roller, Kirk D.; Hareski, Patricia E.; Kotzur, Gary B., Network communication device including bonded ports for increased bandwidth.
Mayer Dale J. ; Richter Roger ; Witkowski Michael L. ; Kotzur Gary B. ; Hareski Patricia E. ; Walker William J., Network switch with shared memory system.
Scorse Jim (Webster NY) Throop Daniel A. (Victor NY) Beck Adam (Henrietta NY) Jaworski Mark (Fairport NY), Prioritized image transmission system and method.
Volftsun Lev ; Neighbors Clay H. ; Rednor Fred R. ; West Andrew Hardie,GBX ; Auerbach David ; Kingston Adrian Richard, Protocol conversion using channel associated signaling.
Sharma, Manish; Zhang, Xiaoyu; Mammone, Richard J., Subword-based speaker verification using multiple-classifier fusion, with channel, fusion, model and threshold adaptation.
Penners John Henry Hubert ; Kamat Purushottam Vithal ; Sirovica Dejan, System and method for providing packet data and voice services to mobile subscribers.
Tung Peter ; Mirashrafi Mojtaba ; Sloss Reed ; Cox Katherine, System for negotiating conferencing capabilities by selecting a subset of a non-unique set of conferencing capabilities.
※ AI-Helper는 부적절한 답변을 할 수 있습니다.