Verizon Patent and Licensing Inc.

Richard L Welch

Christopher D Bynum

Benjamin E Kornmeier

A device may receive a hash table that includes lists of protocol detectors, wherein the hash table is generated based on historical process data identifying potential process variables associated with an industrial control system. The device may receive a packet identifying potential process variables associated with the industrial control system, and may extract, from the packet, packet data identifying a source address, a destination address, a port, and a transport protocol. The device may compare the packet data with data in the hash table to identify a set of lists of protocol detectors, and may process the packet data, with the set of lists of protocol detectors, to determine a matching protocol, no matching protocol, or a potential matching protocol for the packet. The device may perform one or more actions based on determining the matching protocol, no matching protocol, or the potential matching protocol for the packet.

Systems and methods for identifying unknown protocols associated with industrial control systems

A device may receive, from a source device, original time series data to be stored in a data structure associated with the device, and may sort the original time series data to generate sorted time series data. The device may identify an index for the original time series data based on the sorted time series data. The device may process the sorted time series data, with a regression model, to generate compressed time series data and parameters associated with the compressed time series data. The device may encode the index to generate an encoded index, and may store the encoded index, the compressed time series data, and the parameters in the data structure.

Growing community of inventors

Boulder, CO, United States of America

Richard L Welch