System and method for determining reliability of nodes in mobile wireless network

Patent metadata

Field	Value
Publication number	US-10003985-B1
Application number	US-201514625988-A
Country	US
Kind code	B1
Filing date	Feb 19, 2015
Priority date	Jan 23, 2012
Publication date	Jun 19, 2018
Grant date	Jun 19, 2018

Abstract

Described is a system for determining reliability of nodes in a mobile wireless network. The system is operable for receiving an Exploitation Network (Xnet) database. The Xnet database has an Xnet structure formed of a physical node layer (NetTopo), a network dependent (NetDep) layer, and an application dependent (AppDep) layer. The NetTopo layer includes NetTopo graphs reflecting connectivity between the nodes. The NetDep layer includes NetDep graphs reflecting connectivity dependencies amongst the nodes, and the AppDep layer includes Appdep graphs reflecting software application dependencies amongst the nodes. An Xnet Analytics Engine is run that monitors and evaluates reliability of each node in the mobile wireless network to provide a reliability estimate of each node.

First claim

What is claimed is:

1. A system for determining reliability of nodes in a mobile wireless network, the system comprising:
one or more processors and a memory, the memory being a non-transitory computer-readable medium having executable instructions encoded thereon, such that upon execution of the instructions, the one or more processors perform operations of:
receiving an Exploitation Network (Xnet) database, the Xnet database having an Xnet structure formed of a physical node layer (NetTopo), a network dependent (NetDep) layer, and an application dependent (AppDep) layer, the NetTopo layer having NetTopo graphs reflecting connectivity between the nodes, the NetDep layer having NetDep graphs reflecting connectivity dependencies amongst the nodes, and the AppDep layer having Appdep graphs reflecting software application dependencies amongst the nodes;
running an Xnet Analytics Engine that monitors and evaluates reliability of each node in the mobile wireless network to provide a reliability estimate of each node and designating suspect nodes;
actively probing suspect nodes to determine if behaviors that caused the suspect nodes to be suspected are due to consequences of normal operation or malicious operation; and
isolating nodes in the mobile wireless network that are determined to be exhibiting behaviors due to malicious operation.

2. The system as set forth in claim 1 , wherein the Xnet Analytics Engine further comprises:
an Xnet Dynamics (XD) module that is operable for detecting and predicting critical transitions in the AppDep and NetDep layers for misinformation identification;
an Xnet Controllability and Observability (XCO) module that is operable for identifying nodes in the Xnet for active probing and observation as suspect nodes;
an Xnet Evolvability (XE) module that is operable for predicting potential propagation and consequences of an attack on one or more nodes and focusing resources for monitoring and protecting the network; and
a Reliability Estimation (RE) module that is operable for receiving data from each of the XD module, XCO module, and XE module to generate a reliability estimation of each node in the mobile wireless network, the reliability estimation being a trust metric.

3. The system as set forth in claim 2 , wherein if a node's trust metric falls below a threshold, causing the XCO module to actively probe and observe the node to test the reliability estimate.

4. The system as set forth in claim 3 , wherein the XD module receives a data plane of behavior time series as extracted from the AppDep and NetDep layers to generate structure dependency changes in the AppDep and NetDep layers, the structure dependency changes being indicative of critical transitions in the AppDep and NetDep layers between misbehaving nodes for misinformation identification.

5. The system as set forth in claim 4 , wherein the XCO module receives the AppDep graphs, NetDep graphs, NetTopo graphs, and structure dependency changes as generated by the XD module to identify the nodes in the Xnet for active probing and observation as suspect nodes.

6. The system as set forth in claim 5 , wherein the XE module receives the Xnet structure, the misbehaving nodes, and suspect nodes to generate a confidence measure of how well an observed pattern of node failures matches a contagion or cascade failure, such that if the confidence measure exceeds a threshold, the XE module outputs simulation results of anticipated contagion paths with a set of anticipated critical nodes whose failures can trigger collapse of the Xnet structure.

7. A method for determining reliability of nodes in a mobile wireless network, the method comprising an act of:
causing one or more processors to execute instructions on a memory, such that upon execution of the instructions, the one or more processors perform operations of:
receiving an Exploitation Network (Xnet) database, the Xnet database having an Xnet structure formed of a physical node layer (NetTopo), a network dependent (NetDep) layer, and an application dependent (AppDep) layer, the NetTopo layer having NetTopo graphs reflecting connectivity between the nodes, the NetDep layer having NetDep graphs reflecting connectivity dependencies amongst the nodes, and the AppDep layer having Appdep graphs reflecting software application dependencies amongst the nodes; and
running an Xnet Analytics Engine that monitors and evaluates reliability of each node in the mobile wireless network to provide a reliability estimate of each node and designating suspect nodes;
actively probing suspect nodes to determine if behaviors that caused the suspect nodes to be suspected are due to consequences of normal operation or malicious operation; and
isolating nodes in the mobile wireless network that are determined to be exhibiting behaviors due to malicious operation.

8. The method as set forth in claim 7 , wherein running the Xnet Analytics Engine further comprises operations of:
detecting and predicting, with an Xnet Dynamics (XD) module, critical transitions in the AppDep and NetDep layers for misinformation identification;
identifying, with an Xnet Controllability and Observability (XCO) module, nodes in the Xnet for active probing and observation as suspect nodes;
predicting, with an Xnet Evolvability (XE) module, potential propagation and consequences of an attack on one or more nodes and focusing resources for monitoring and protecting the network; and
receiving, with a Reliability Estimation (RE) module, data from each of the XD module, XCO module, and XE module to generate a reliability estimation of each node in the mobile wireless network, the reliability estimation being a trust metric.

9. The method as set forth in claim 8 , wherein if a node's trust metric falls below a threshold, causing the XCO module to actively probe and observe the node to test the reliability estimate.

10. The method as set forth in claim 9 , wherein the XD module receives a data plane of behavior time series as extracted from the AppDep and NetDep layers to generate structure dependency changes in the AppDep and NetDep layers, the structure dependency changes being indicative of critical transitions in the AppDep and NetDep layers between misbehaving nodes for misinformation identification.

11. The method as set forth in claim 10 , wherein the XCO module receives the AppDep graphs, NetDep graphs, NetTopo graphs, and structure dependency changes as generated by the XD module to identify the nodes in the Xnet for active probing and observation as suspect nodes.

12. The method as set forth in claim 11 , wherein the XE module receives the Xnet structure, the misbehaving nodes, and suspect nodes to generate a confidence measure of how well an observed pattern of node failures matches a contagion or cascade failure, such that if the confidence measure exceeds a threshold, the XE module outputs simulation results of anticipated contagion paths with a set of anticipated critical nodes whose failures can trigger collapse of the Xnet structure.

13. A computer program product for determining reliability of nodes in a mobile wireless network, the computer program product comprising:
a non-transitory computer-readable medium having executable instructions encoded thereon, such that upon execution of the instructions by one or more processors, the one or more processors perform operations of:
receiving an Exploitation Network (Xnet) database, the Xnet database having an Xnet structure formed of a physical node layer (NetTopo), a network dependent (NetDep) layer, and an application dependent (AppDep) layer, the NetTopo layer having NetTopo graphs reflecting connectivity between t

Assignees

• Hrl Lab Llc

Inventors

• Holland Gavin D
• Howard Michael D
• Lu Tsai-Ching
• El Defrawy Karim
• Keegan Matthew S
• Ni Kang-Yu

Classifications

• H04L41/0645 Primary

  by additionally acting on or stimulating the network after receiving notifications · CPC title

• H04W24/10

  Scheduling measurement reports {; Arrangements for measurement reports} · CPC title

• H04L43/045

  for graphical visualisation of monitoring data · CPC title

• H04L41/147

  for predicting network behaviour · CPC title

• H04W24/06 Primary

  Testing, {supervising or monitoring} using simulated traffic · CPC title