The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 20, 2018

Filed:

Dec. 12, 2013
Applicant:

Nec Europe Ltd., Heidelberg, DE;

Inventors:

Maurizio Dusi, Gadesco Pieve Delmona, IT;

Saverio Niccolini, Neckargemuend, DE;

Giulio Picierro, Velletri, IT;

Riccardo Paolillo, Rome, IT;

Michele Orru, Lunamatrona, IT;

Giuseppe Bianchi, Rome, IT;

Assignee:

NEC CORPORATION, Tokyo, JP;

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); G06F 17/30 (2006.01); G06N 7/00 (2006.01); H04L 12/26 (2006.01);
U.S. Cl.
CPC ...
H04L 63/0263 (2013.01); G06F 17/30699 (2013.01); G06N 7/005 (2013.01); H04L 43/028 (2013.01); H04L 63/0245 (2013.01); H04L 63/0254 (2013.01); H04L 63/145 (2013.01);
Abstract

A method for analyzing a data flow includes extracting packet information of a packet of the data flow, determining the status of the packet and the status of the data flow based on the extracted packet information and storing the packet for later inspection when the status of the packet and/or the status of the data flow indicate that the packet is out-of sequence, and inspecting the packet and/or the stored packet based on inspection rules. Upon a partial match of at least one of the inspection rules with the extracted packet information, a result of the inspection of the packet is temporarily stored. Already stored packets are inspected when they are in-order with already inspected packets. Upon a total match of at least one of the inspection rules, a predetermined action is performed and the stored result is deleted.


Find Patent Forward Citations

Loading…