The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Aug. 11, 2020

Filed:

Dec. 08, 2017
Applicant:

Nicira, Inc., Palo Alto, CA (US);

Inventors:

Alok Tiagi, Palo Alto, CA (US);

Jayant Jain, Palo Alto, CA (US);

Anirban Sengupta, Saratoga, CA (US);

Subrahmanyam Manuguri, San Jose, CA (US);

Vedant Saran, Campbell, CA (US);

Assignee:

NICIRA, INC., Palo Alto, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); H04L 12/813 (2013.01); H04L 12/26 (2006.01); H04L 12/851 (2013.01);
U.S. Cl.
CPC ...
H04L 63/1425 (2013.01); H04L 43/062 (2013.01); H04L 43/067 (2013.01); H04L 47/20 (2013.01); H04L 47/2441 (2013.01); H04L 63/0227 (2013.01); H04L 63/101 (2013.01); H04L 63/20 (2013.01); H04L 63/0272 (2013.01);
Abstract

For a managed network including multiple nodes providing multiple services and executing multiple applications some embodiments provide a method for generating groupings of network addresses associated with different applications or services. The method analyzes network traffic patterns using a probabilistic topic modeling algorithm to generate the groupings of network addresses. In some embodiments, data is collected and analyzed periodically. A network administrator defines the granularity of the time stamps in some embodiments to monitor changes in network traffic patterns over time for each network address or node and/or for the network as a whole. For each network address or node, a probability distribution over the topics at a given time is stored in some embodiments. The stored distributions are then used to determine a divergence over time of the application or service provided by the network address or node. Additionally, the stored distributions can be used to detect anomalous behavior.


Find Patent Forward Citations

Loading…