Network fingerprinting
First Claim
1. A computer-readable medium having thereon computer-executable instructions for performing a method comprising:
- establishing at least one connection to at least one computer network;
issuing an issued network identifier for at least one computer network of said at least one computer network; and
determining an identity confidence for each issued network identifier with respect to at least one current computer network.
2 Assignments
0 Petitions
Accused Products
Abstract
A network fingerprinting component for a computerized system issues network identifiers (NID) for computer networks. Identity confidences may be determined for each issued network identifier with respect to current computer networks. Computer network attributes may include passive network attributes and active network attributes. Retrieving values for active network attributes involves generating network traffic. As a result passive network attributes may be available to the network fingerprinting component before active network attributes. Learned identity confidence modifiers may be applied to identity confidences determined independent of active network attributes to achieve more accurate identity confidence sooner. Better learned identity confidence modifiers may be obtained by comparing identity confidences for a particular computer network determined independently of active network attributes with identity confidences for the computer network determined once active network attributes become available and then adjusting the learned identity confidence modifiers so as to minimize any differences.
46 Citations
31 Claims
-
1. A computer-readable medium having thereon computer-executable instructions for performing a method comprising:
-
establishing at least one connection to at least one computer network;
issuing an issued network identifier for at least one computer network of said at least one computer network; and
determining an identity confidence for each issued network identifier with respect to at least one current computer network. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. A computer-readable medium having thereon computer-executable instructions for performing a method comprising:
-
determining a first set of identity confidences such that determining the first set of identity confidences comprises applying at least one of a set of learned identity confidence modifiers to at least one of the first set of identity confidences;
determining a second set of identity confidences such that determining the second set of identity confidences comprises applying at least one of a set of active network attribute identity confidence modifiers to at least one of the second set of identity confidences; and
adjusting the set of learned identity confidence modifiers so that if the first set of identity confidences were to be re-determined then differences between a re-determined first set of identity confidences and the second set of identity confidences would be minimized. - View Dependent Claims (13, 14, 15, 16, 17, 18, 19, 20)
-
-
21. A computerized system, comprising a network fingerprinting component configured to, at least:
-
issue at least one network identifier for at least one computer network;
maintain a set of issued network identifiers; and
maintain a set of current identity confidences, the set of current identity confidences comprising an identity confidence for each issued network identifier with respect to at least one current computer network. - View Dependent Claims (22, 23, 24, 25, 26, 27, 28, 29, 30, 31)
-
Specification