Efficient network monitoring and control

• US 20090113062A1
• Filed: 10/31/2007
• Published: 04/30/2009
• Est. Priority Date: 10/31/2007
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Woodman, Alistair
• Granted Patent: US 8,195,815 B2
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 40/04 Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 41/5003 Managing SLA; Interaction between SLA and QoS
• CPC Class Codes: H04L 41/5022 by giving priorities, e.g. assigning classes of service
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks

Abstract

In one embodiment, a method for monitoring traffic associated with users in a network includes assigning a trust level to each of the users, monitoring traffic associated with each of the users, and analyzing the monitored traffic. A level of monitoring is based on the trust level of the user. A user'"'"'s trust level is modified if the analyzed traffic indicates that the user is operating outside of specified network usage parameters. An apparatus for monitoring traffic associated with users in a network is also disclosed.

Claims

1. A method for monitoring traffic associated with a plurality of users in a network, comprising:

assigning a trust level to each of said plurality of users;

monitoring the traffic associated with each of said plurality of users, wherein a level of monitoring is based on said trust level of the user;

analyzing the monitored traffic; and

modifying said trust level of one said plurality of users if the analyzed traffic indicates that the user is operating outside of specified network usage parameters.

2. The method of claim 1 further comprising associating one or more control policies with each of said trust levels and enforcing said control policies based on said trust level of each of said plurality of users.

3. The method of claim 1 wherein assigning a trust level comprises analyzing network usage data of said plurality of users.

4. The method of claim 1 further comprising updating said specified network usage parameters.

5. The method of claim 1 wherein said trust levels comprise three or more trust levels.

6. The method of claim 1 wherein analyzing the monitored traffic comprises comparing the monitored traffic to requirements specified in an agreement between the user and a network provider.

7. The method of claim 1 further comprising transmitting a notification upon modifying said trust level of one of said plurality of users.

8. The method of claim 1 further comprising transmitting a warning to one of said plurality of users if the user is operating beyond a first threshold but within said specified network usage parameters.

9. The method of claim 1 wherein said network usage parameters comprise a bandwidth limit and a set period of time over which the bandwidth limit is exceeded.

10. The method of claim 1 wherein modifying said trust level comprises decreasing said trust level and the level of monitoring is increased as the trust level is decreased.

11. The method of claim 10 further comprising increasing said trust level of the user if the user operates within said specified network usage parameters for a set period of time.

12. An apparatus for monitoring traffic associated with users in a network, comprising:

a database for storing a list of users and a trust level assigned to each of the users;

a monitor operable to monitor the traffic associated with each of the users, wherein a level of monitoring is based on said trust level of the user; and

a processor configured to analyze the monitored traffic and modify said trust level of the users if the analyzed traffic indicates that the user is operating outside of specified network usage parameters.

13. The apparatus of claim 12 wherein the monitor operates at layer 4-layer 7 of the network.

14. The apparatus of claim 12 wherein the processor is further configured to apply one or more traffic control policies based on said trust level of the user.

15. The apparatus of claim 12 wherein the processor is configured to compare the monitored traffic to requirements specified in an agreement between the user and a network provider.

16. The apparatus of claim 12 wherein the processor is configured to transmit a notification upon modifying said trust level of one of the users.

17. The apparatus of claim 12 wherein the processor is configured to transmit a warning to one of said plurality of users if the user is operating beyond a first threshold but within said specified network usage parameters.

18. The apparatus of claim 12 wherein the processor is configured to update specified network usage parameters based on updates received at the apparatus.

19. A system for monitoring traffic associated with a plurality of users in a network, comprising:

means for assigning a trust level to each of said plurality of users;

means for monitoring the traffic associated with each of said plurality of users, wherein a level of monitoring is based on said trust level of the user;

means for analyzing the monitored traffic; and

means for modifying said trust level of one of the plurality of users if the analyzed traffic indicates that the user is operating outside of specified network usage parameters.

20. The system of claim 19 wherein means for monitoring comprises means for monitoring the traffic at layer 4-layer 7 of the network.