Systems and methods for rule-based anomaly detection on IP network flow
US-9680877-B2 · Jun 13, 2017 · US
US2016156541A1 · US · A1
| Field | Value |
|---|---|
| Publication number | US-2016156541-A1 |
| Application number | US-201414557418-A |
| Country | US |
| Kind code | A1 |
| Filing date | Dec 1, 2014 |
| Priority date | Nov 27, 2014 |
| Publication date | Jun 2, 2016 |
| Grant date | — |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Methods, systems, and computer readable media for receiving test configuration information are disclosed. According to one exemplary method, the method occurs at a node configured to operate in a private network. The method includes registering node identification information with a registration server. The method also includes sending a keep-alive message to the registration server. The method further includes receiving, in response to the keep-alive message and via the registration server, test configuration information from a configuration system outside the private network.
Opening claim text (preview).
What is claimed is: 1 . A method for receiving test configuration information using a registration server, the method comprising: at a node configured to operate in a private network: registering node identification information with a registration server, sending a keep-alive message to the registration server; and receiving, in response to the keep-alive message and via the registration server, test configuration information from a configuration system outside the private network. 2 . The method of claim 1 comprising: at the configuration system and prior to the endpoint receiving the test configuration information from a configuration system outside the private network: requesting node identification information from the registration server; generating, using the node identification information, the test configuration information; and sending the test configuration information to the registration server. 3 . The method of claim 1 comprising: sending the test configuration information to one or more nodes in the private network. 4 . The method of claim 1 comprising: initiating, using the test configuration information, a connection with the configuration system or an intermediate node associated with the configuration system to receive additional test configuration information. 5 . The method of claim 1 comprising: configuring, using the test configuration information, the node for testing. 6 . The method of claim 4 wherein initiating the connection with the configuration system includes: at the configuration system: receiving, from the node, a connection request containing the node identification information; storing, by a monitoring thread, the connection request in a data structure; selecting, by a setup thread, the connection request from the data structure; inspecting, by the setup thread, the node identification information associated with the connection request; determining, by the setup thread and using the node identification information, whether the setup thread should process the connection request; and in response to determining that the setup thread should process the connection request, processing, by the setup thread, the connection request. 7 . The method of claim 6 comprising: in response to determining that the setup thread should not process the connection request, storing the connection request in the data structure with the node identification information as a key, wherein a different thread selects the connection request using the key. 8 . The method of claim 1 wherein the node is behind a firewall that blocks direct communications sent from the configuration system. 9 . The method of claim 1 wherein the node identification information includes a name, a version identifier, an operating system identifier, a platform identifier, address information, or port information. 10 . The method of claim 1 wherein the node includes an endpoint, a proxy endpoint, a proxy registration server, a registration server, or a proxy node. 11 . The method of claim 1 wherein the test configuration information includes information about a test session, the node identification information, address information associated with the configuration system, port information associated with the configuration system, information about one or more inbound peers for one or more nodes associated with the test session, or information about one or more outbound peers for one or more nodes associated with the test session. 12 . A system for receiving test configuration information, the system comprising: a node configured to operate in a private network, the node comprising: a test configuration module (TCM) configured to: register node identification information with a registration server, send a keep-alive message to the registration server; and receive, in response to the keep-alive message and via the registration server, test configuration information from a configuration system outside the private network. 13 . The system of claim 12 wherein prior to the endpoint receiving the test configuration information from a configuration system outside the private network, the configuration system is configured to: request node identification information from the registration server; generate, using the node identification information, the test configuration information; and send the test configuration information to the registration server. 14 . The system of claim 12 wherein the node is configured to send the test configuration information to one or more nodes in the private network. 15 . The system of claim 12 wherein the node is configured to initiate, using the test configuration information, a connection with the configuration system or an intermediate node associated with the configuration system to receive additional test configuration information. 16 . The system of claim 12 wherein the node is configured to configure, using the test configuration information, the node for testing. 17 . The system of claim 15 wherein the configuration system is configured to: receive, from the node, a connection request containing the node identification information; store, by a monitoring thread, the connection request in a data structure; select, by a setup thread, the connection request from the data structure; inspect, by the setup thread, the node identification information associated with the connection request; determine, by the setup thread and using the node identification information, whether the setup thread should process the connection request; and in response to determining that the setup thread should process the connection request, process, by the setup thread, the connection request. 18 . The system of claim 17 wherein the configuration system is configured to: in response to determining that the setup thread should not process the connection request, store the connection request in the data structure with the node identification information as a key, wherein a different thread selects the connection request using the key. 19 . The system of claim 12 wherein the node is behind a firewall that blocks direct communications sent from the configuration system. 20 . The system of claim 12 wherein the node identification information includes a name, a version identifier, an operating system identifier, a platform identifier, address information, or port information. 21 . The system of claim 12 wherein the node includes an endpoint, a proxy endpoint, a proxy registration server, a registration server, or a proxy node. 22 . The system of claim 12 wherein the test configuration information includes information about a test session, the node identification information, address information associated with the configuration system, port information associated with the configuration system, information about one or more inbound peers for one or more nodes associated with the test session, or information about one or more outbound peers for one or more nodes associated with the test session. 23 . A non-transitory computer readable medium comprising computer executable instructions embodied in the computer readable medium that when executed by a processor of a computer perform steps comprising: at a node configured to operate in a private network: registering node identification information with a registration server, sending a keep-alive message to the regi
for controlling access to devices or network resources · CPC title
Active monitoring, e.g. heartbeat, ping or trace-route · CPC title
Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration · CPC title
for initial configuration or provisioning, e.g. plug-and-play · CPC title
Testing arrangements · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.