The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 02, 2021

Filed:

May. 11, 2020
Applicant:

Sandvine Corporation, Waterloo, CA;

Inventors:

Don Bowman, Waterloo, CA;

Harmeet Singh Bedi, Waterloo, CA;

Assignee:

Other;

Attorneys:
Primary Examiner:
Int. Cl.
CPC ...
H04L 12/26 (2006.01); H04L 12/58 (2006.01); H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
H04L 43/08 (2013.01); H04L 43/16 (2013.01); H04L 51/12 (2013.01); H04L 63/0227 (2013.01); H04L 63/1408 (2013.01);
Abstract

A system for detecting a source or destination of abnormal message traffic on a network, the system having: an abnormality detection engine configured to track messages between a plurality of sources and a plurality of destinations; and one or more abnormality detectors configured to: determine a bandwidth variation of a rate of messages to a destination, wherein determining the bandwidth variation comprises: generate a bandwidth counter for each destination; update the bandwidth counter based on the rate of messages to a destination; determine if a predetermined amount of time has passed; and compare values in the source and destination pair counter to a predetermined source and destination pair threshold and comparing values in the bandwidth counter to a predetermined steady rate of messages after the predetermined amount of time has passed to determine if there is abnormal message traffic related to a source or destination based on both comparisons.


Find Patent Forward Citations

Loading…