Service detection
First Claim
Patent Images
1. A graphical user interface for configuring a new service detection process, the graphical user interface comprising:
- a first field that depicts choices for entities to track in the network;
a second field that allows a system to track if the selected entity is providing or consuming a service;
a third field that depicts a range over which to track an entity selected in the first field; and
an fourth field to specify a severity for an alert generated if a new service is detected.
21 Assignments
0 Petitions
Accused Products
Abstract
A new service detection process in a network retrieves a baseline list of port protocols used by a entity being tracked. The baseline value is determined over a baseline period. A current list of port protocols for the entity being tracked is also retrieved and is compared to determine whether there is a difference in the port protocols, by having a protocol that was in a current list but was not in the baseline list. If there is a difference the process indicates a new service involving the tracked entity.
34 Citations
22 Claims
-
1. A graphical user interface for configuring a new service detection process, the graphical user interface comprising:
-
a first field that depicts choices for entities to track in the network;
a second field that allows a system to track if the selected entity is providing or consuming a service;
a third field that depicts a range over which to track an entity selected in the first field; and
an fourth field to specify a severity for an alert generated if a new service is detected. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A method for detection of a new service involving an entity, the method comprises:
-
retrieving a baseline list of port protocols used by a entity being tracked, the baseline value determined over a baseline period;
retrieving a current list of port protocols for the entity being tracked; and
determining whether there is a difference in the port protocols, by having a protocol that was in a current list but was not in the baseline list; and
if there is a difference;
indicating a new service involving the tracked entity. - View Dependent Claims (9, 10, 11, 12, 13, 14)
-
-
15. A computer program product residing on a computer readable medium for detection of new services in a network, the computer program product comprising instructions for causing a computer to:
-
retrieve a baseline list of port protocols used by a entity being tracked, the baseline value determined over a baseline period;
retrieve a current list of port protocols for the entity being tracked; and
determine whether there is a difference in the port protocols, by having a protocol that was in a current list but was not in the baseline list; and
if there is a difference;
indicate a new service involving the tracked entity. - View Dependent Claims (16, 17, 18, 19, 20, 21, 22)
-
Specification