GEOGRAPHICAL INTRUSION RESPONSE PRIORITIZATION MAPPING SYSTEM

• US 20120159626A1
• Filed: 01/02/2012
• Published: 06/21/2012
• Est. Priority Date: 08/12/2004
• Status: Abandoned Application

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Corporate Services Group Incorporated (Verizon Communications Inc.)
• Inventors: McConnell, James Trent
• Application Number:
  US13/342,146
• Publication Number:
  US 20120159626A1
• Time in Patent Office: Days
• US Class Current: 726/23
• CPC Class Codes: H04L 41/0677 Localisation of faults
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal

Abstract

Systems and methods for geographically mapping an intrusion into a network having one or more network points include receiving intrusion information identifying a intrusion into a point of the network, correlating the intrusion information with location information for the identified network point, and network identification information for the identified network point, and generating a map displaying a geographical location of the intrusion.

Claims

1-68. -68. (canceled)

69. A method for displaying information reflecting an intrusion into a computer network, the method comprising:

receiving network intrusion information indicating a potential intrusion into at least one computing device connected to the network;

responsive to receiving the network intrusion information, identifying a network address associated with the at least one intruded computing device;

determining, using the network address, a geographical location of the at least one intruded computing device;

providing a geographical map of an area including at least the geographical location of the at least one potentially intruded computing device; and

providing a network intrusion symbol on the map to designate the geographical location of the at least one potentially intruded computing device.

70. The method of claim 69, wherein the network address includes an Internet Protocol (IP) address.

71. The method of claim 69, wherein identifying a network address includes retrieving, from an Address Routing Protocol (ARP) database using the network address, a router address of a router associated with the at least one potentially intruded computing device.

72. The method of claim 71, wherein determining a geographical location includes:

retrieving, from a router location information database using the retrieved router address, geographical location information corresponding to the at least one potentially intruded computing device; and

determining the geographical location of the at least one potentially intruded computing device point based on the retrieved geographical location information.

73. The method of claim 69, wherein the network intrusion symbol represents a quantity of potentially intruded computing devices.

74. The method of claim 69, further comprising determining a status of a response to mitigate the potential intrusion into the at least one computing device.

75. The method of claim 74, further comprising distinguishing the network intrusion symbol on the map in order to indicate the status of the response to mitigate the potential intrusion.

76. The method of claim 75, wherein distinguishing the network intrusion symbol includes coloring the network intrusion symbol to indicate the status of the response to mitigate the potential intrusion.

77. The method of claim 75, further comprising:

determining an updated status of the response to mitigate the potential intrusion; and

distinguishing the network intrusion symbol on the map in order to indicate the updated status of the response to mitigate the potential intrusion.

78-1. The non-transitory computer-readable storage medium of claim 78, wherein the network address includes an Internet Protocol (IP) address.

86. A system for geographically mapping an intrusion into a computer network, the system comprising:

a network address database storing network address information for a plurality of computing devices connected to the network;

a location database storing geographical location information associated with the plurality of computing devices;

a computer in electronic communication with the map database and being configured to;

receive network intrusion information indicating a potential intrusion into at least one computing device connected to the network;

responsive to receiving the network intrusion information, identify a network address associated with the at least one potentially intruded computing device using the network address database;

determine, based on the network address, a geographical location of the at least one potentially intruded computing device using the location database;

provide a geographical map of an area including at least the geographical location of the at least one potentially intruded computing device; and

provide a network intrusion symbol on the map to designate the geographical location of the at least one potentially intruded computing device.

87. The system of claim 86, wherein the computer is further configured to determine a status of a response to mitigate the potential intrusion into the at least one computing device.

88. The system of claim 87, wherein the computer is further configured to distinguish the network intrusion symbol on the map in order to indicate the status of the response to mitigate the potential intrusion.