Methods and systems for time-based application domain classification and mapping
First Claim
Patent Images
1. A method comprising:
- detecting, by a configurable device on a network, an application on the network having an anchor domain;
marking, by the configurable device, any traffic source that accesses the application via the anchor domain, and identifying a corresponding time of application access by each marked traffic source;
monitoring, by the configurable device, for each marked traffic source, network flows from that traffic source; and
designating, by the configurable device, for each marked traffic source, those network flows from that traffic source that occur within a predetermined time period from the identified corresponding time of application access by that traffic source as belonging to the application.
4 Assignments
0 Petitions
Accused Products
Abstract
A method includes detecting at a device on a network an application having an anchor domain, marking the application with a traffic source having an entry point domain that accessed the application and a time of detection and designating network flows from the traffic source within a predetermined time from the time of detection as belonging to the application.
-
Citations
20 Claims
-
1. A method comprising:
-
detecting, by a configurable device on a network, an application on the network having an anchor domain; marking, by the configurable device, any traffic source that accesses the application via the anchor domain, and identifying a corresponding time of application access by each marked traffic source; monitoring, by the configurable device, for each marked traffic source, network flows from that traffic source; and designating, by the configurable device, for each marked traffic source, those network flows from that traffic source that occur within a predetermined time period from the identified corresponding time of application access by that traffic source as belonging to the application. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
-
11. A networked branch device configured to:
-
detect an application having an anchor domain on a network; mark, via a processor having a memory storing instructions for performing actions, any traffic source that accesses the application via the anchor domain of the application, and identify a corresponding time of application access by that marked traffic source; monitor network flows from each marked traffic source; designate those network flows from the any marked traffic source that occur within a predetermined time period from the identified corresponding time of application access by the marked traffic source as belonging to the application. - View Dependent Claims (12, 13, 14, 15, 16, 17, 18, 19, 20)
-
Specification