Network security path identification and validation
US-12170668-B2 · Dec 17, 2024 · US
US2018331908A1 · US · A1
| Field | Value |
|---|---|
| Publication number | US-2018331908-A1 |
| Application number | US-201715593635-A |
| Country | US |
| Kind code | A1 |
| Filing date | May 12, 2017 |
| Priority date | May 12, 2017 |
| Publication date | Nov 15, 2018 |
| Grant date | — |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
An adaptive multi-phase approach to estimating network parameters is presented. By gathering and aggregating raw network traffic data and comparing against default network parameters, a training data set may be generated. A black box optimization may be used in tandem with a supervised learning algorithm to bias towards better choices and eventually pick network parameters which optimize performance. Data delivery strategies are applied to deliver content using the optimized network policies based on the estimated parameters.
Opening claim text (preview).
What is claimed is: 1 . A method, comprising: receiving, at a plurality of proxy servers, a plurality of data transfer requests from a plurality of user devices; determining a range of parameter values associated with a TCP parameter; assigning a random parameter value from the range of parameter values to the TCP parameter for a time block of a plurality of time blocks, the random parameter value comprising a static policy; assigning a default TCP parameter value to a subset of the plurality of data transfer requests, wherein raw network traffic data values associated with the subset of the plurality of data transfer requests comprise bypass traffic data values; determining a plurality of raw network traffic data values associated with the plurality of data transfer requests based on the static policy; storing the bypass traffic data values and the plurality of raw network traffic data values based on the static policy in a network traffic data store; for each combination of TCP parameter and time block of the plurality of time blocks: determining an aggregate data point having performance metrics comparing static policy against the bypass traffic data values; estimating a best value for the TCP parameter; and verifying the best value by comparing to a second TCP parameter value determined from a black box optimization, wherein the best value is verified based on a threshold tolerance value associated with the TCP parameter. 2 . The method as recited in claim 1 , further comprising determining a network policy associated with the TCP parameter for use on future network traffic based on the best value being within the threshold tolerance value. 3 . The method as recited in claim 2 , wherein each proxy server comprises an accelerator to implement the network policy. 4 . The method as recited in claim 2 , wherein each user device comprises an agent that implements the network policy. 5 . The method as recited in claim 1 , wherein determining the plurality of raw network traffic data values is performed by each proxy host based on the TCP parameter. 6 . The method as recited in claim 1 , wherein determining the plurality of raw network traffic data values is performed by each user device based on the TCP parameter. 7 . A non-transitory computer readable medium storing a program of instructions that is executable by a device to perform a method, the method comprising: receiving, at a plurality of proxy servers, a plurality of data transfer requests from a plurality of user devices; determining a range of parameter values associated with a TCP parameter; assigning a random parameter value from the range of parameter values to the TCP parameter for a time block of a plurality of time blocks, the random parameter value comprising a static policy; assigning a default TCP parameter value to a subset of the plurality of data transfer requests, wherein raw network traffic data values associated with the subset of the plurality of data transfer requests comprise bypass traffic data values; determining a plurality of raw network traffic data values associated with the plurality of data transfer requests based on the static policy; storing the bypass traffic data values and the plurality of raw network traffic data values based on the static policy in a network traffic data store; for each combination of TCP parameter and time block of the plurality of time blocks: determining an aggregate data point having performance metrics comparing static policy against the bypass traffic data values; estimating a best value for the TCP parameter; and verifying the best value by comparing to a second TCP parameter value determined from a black box optimization, wherein the best value is verified based on a threshold tolerance value associated with the TCP parameter. 8 . The non-transitory computer readable medium as recited in claim 7 , further comprising determining a network policy associated with the TCP parameter for use on future network traffic based on the best value being within the threshold tolerance value. 9 . The non-transitory computer readable medium as recited in claim 8 , wherein each proxy server comprises an accelerator to implement the network policy. 10 . The non-transitory computer readable medium as recited in claim 8 , wherein each user device comprises an agent that implements the network policy. 11 . The non-transitory computer readable medium as recited in claim 7 , wherein determining the plurality of raw network traffic data values is performed by each proxy host based on the TCP parameter. 12 . The non-transitory computer readable medium as recited in claim 7 , wherein determining the plurality of raw network traffic data values is performed by each user device based on the TCP parameter. 13 . An apparatus, comprising: a subsystem, implemented at least partially in hardware, that receives, at a plurality of proxy servers, a plurality of data transfer requests from a plurality of user devices; a subsystem, implemented at least partially in hardware, that determines a range of parameter values associated with a TCP parameter; a subsystem, implemented at least partially in hardware, that assigns a random parameter value from the range of parameter values to the TCP parameter for a time block of a plurality of time blocks, the random parameter value comprising a static policy; a subsystem, implemented at least partially in hardware, that assigns a default TCP parameter value to a subset of the plurality of data transfer requests, wherein raw network traffic data values associated with the subset of the plurality of data transfer requests comprise bypass traffic data values; a subsystem, implemented at least partially in hardware, that a plurality of raw network traffic data values associated with the plurality of data transfer requests based on the static policy; a subsystem, implemented at least partially in hardware, that stores the bypass traffic data values and the plurality of raw network traffic data values based on the static policy in a network traffic data store; a subsystem, implemented at least partially in hardware, that for each of TCP parameter and time block of the plurality of time blocks: determines an aggregate data point having performance metrics comparing static policy against the bypass traffic data values; estimates a best value for the TCP parameter; and verifies the best value by comparing to a second TCP parameter value determined from a black box optimization, wherein the best value is verified based on a threshold tolerance value associated with the TCP parameter. 14 . The apparatus as recited in claim 13 , further comprising a subsystem, implemented at least partially in hardware, that determines a network policy associated with the TCP parameter for use on future network traffic based on the best value being within the threshold tolerance value. 15 . The apparatus as recited in claim 14 , wherein each proxy server comprises an accelerator to implement the network policy. 16 . The apparatus as recited in claim 14 , wherein each user device comprises an agent that implements the network policy. 17 . The apparatus as recited in claim 13 , wherein determining the plurality of raw network traffic data values is performed by each proxy host based on the TCP parameter. 18 . The apparatus as recited in claim 13 , wherein determining the plurality of raw network traffic data values is performed by each user device based on the TCP parameter.
comprising network management agents or mobile agents therefor · CPC title
Threshold monitoring · CPC title
Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP] · CPC title
Assignment of logical groups to network elements · CPC title
Electricity · mapped topic
Related publications grouped by family.
Answers are generated from the same data shown on this page.