OBJECT CLASSIFICATION IN A CAPTURE SYSTEM
0 Assignments
0 Petitions
Accused Products
Abstract
Objects can be extracted from data flows captured by a capture device. Each captured object can then be classified according to content. In one embodiment, the present invention includes determining whether a captured object is binary or textual in nature, and classifying the captured object as one of a plurality of textual content types based tokens found in the captured object if the captured object is determined to be textual in nature.
-
Citations
51 Claims
-
1-31. -31. (canceled)
-
32. A method, comprising:
-
receiving a flow of packets in a network environment; extracting an object from at least one of the packets; classifying the object based on at least one signature provided inside the object; and providing the object to an object statistics module configured to perform a statistical calculation in order to determine whether the object is binary or textual. - View Dependent Claims (33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49)
-
-
50. An apparatus comprising:
-
a processor; a memory element; and an object statistics module, wherein the processor and the memory element interact with the object statistics module such that the apparatus is configured for; receiving a flow of packets in a network environment; extracting an object from at least one of the packets; classifying the object based on at least one signature provided inside the object; and providing the object to an object statistics module configured to perform a statistical calculation in order to determine whether the object is binary or textual, wherein at least one statistical analysis is performed in order to evaluate a frequency of bytes contained in the object.
-
-
51. Logic encoded in non-transitory media that includes code for execution and when executed by a processor operable to perform operations comprising:
-
receiving a flow of packets in a network environment; extracting an object from at least one of the packets; classifying the object based on at least one signature provided inside the object; and providing the object to an object statistics module configured to perform a statistical calculation in order to determine whether the object is binary or textual, wherein if the object is determined to be textual, a token database is accessed in order to statistically analyze a presence of certain tokens in the object.
-
Specification