The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Dec. 21, 2021
Filed:
Jun. 03, 2019
Sri International, Menlo Park, CA (US);
Kenneth C. Nitz, Redwood City, CA (US);
Phillip Porras, Cupertino, CA (US);
Steven Cheung, San Francisco, CA (US);
SRI International, Menlo Park, CA (US);
Abstract
A correlator that includes a number of modules cooperating with each other. A transaction correlation module correlates network flow information for one or more network packet flows corresponding to one or more host-agent network-transaction records on whom participated in a network packet flow. The host-agent network-transaction records at least contain source information. A host input module to take in the host-agent network-transaction records from each host agent on its host computing device connecting to the correlator. A merged record creator creates a merged record for corresponding matches of one or more of the host-agent network-transaction records to one or more of the network packet flows. The merged record gives the network policy enforcement module a complete picture of both the network traffic flow information along with the source information that participated in the network packet flows in order to apply network polices against the network packet flows.