The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Nov. 08, 2022

Filed:

Dec. 31, 2020
Applicant:

Fortinet, Inc., Sunnyvale, CA (US);

Inventors:

Sameer T. Khanna, Cupertino, CA (US);

Xiaoguang Liu, San Ramon, CA (US);

Jianwen Zhang, Saratoga, CA (US);

Assignee:

Fortinet, Inc., Sunnyvale, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 12/741 (2013.01); H04L 45/74 (2022.01); H04L 69/16 (2022.01); H04L 69/22 (2022.01);
U.S. Cl.
CPC ...
H04L 45/74 (2013.01); H04L 69/16 (2013.01); H04L 69/22 (2013.01);
Abstract

Systems and methods for efficient kernel space packet processing and IoT device classification are provided. According to one embodiment, a computer system performs IoT device detection processing. Packet header information is received for multiple packets. Based on the packet header information, multiple Transmission Control Protocol (TCP) or User Datagram Protocol (UDP) flows between a given source device of multiple devices and a given destination device of the multiple devices are identified. For each TCP or UDP flow: a variable-length feature set is created having a size limited by a predetermined or configurable aggregate number of packets sent and received for the TCP or UDP flow; and it is inferred whether the TCP or UDP flow represents an IoT device communication or a non-IoT device communication by applying a machine-learning model to the variable length feature set. The devices are then each classified as either an IoT device or a non-IoT device by aggregating one or more results of the inference processing for each device of the multiple devices with a voting classifier.


Find Patent Forward Citations

Loading…