DISTRIBUTED NETWORK AND SECURITY OPERATIONS PLATFORM

• US 20200137117A1
• Filed: 10/25/2019
• Published: 04/30/2020
• Est. Priority Date: 10/26/2018
• Status: Active Grant

• Current Assignee: Netography, Inc.
• Original Assignee: Netography, Inc.
• Inventors: Lyon, Barrett, Murphy, Daniel
• Granted Patent: US 11,683,343 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 9/453 Help systems
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 45/02 Topology update or discovery
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 51/02 using automatic reactions or user delegation, e.g. automatic replies or chatbot-generated messages
• CPC Class Codes: H04L 63/0218 Distributed architectures, e.g. distributed firewalls
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

A distributed network and security operations platform is disclosed. The disclosed platform comprises an external service that facilitates network and security operations for a private network. Data from nodes of the private network is received and analyzed by the service, and an output is automatically generated by the service in response to analyzing received data that facilitates modifying the routing performed by at least one or more of the nodes of the private network.

Claims

1. A method, comprising:

receiving data from nodes of a private network at a service external to the private network;

analyzing the received data; and

automatically generating an output in response to analyzing the data that facilitates modifying routing by at least one or more of the nodes of the private network.

2. The method of claim 1, wherein the data comprises a data stream.

3. The method of claim 1, wherein the data comprises sampled data.

4. The method of claim 1, wherein the data comprises flow data.

5. The method of claim 1, wherein the data comprises log data.

6. The method of claim 1, wherein the nodes of the private network comprise edge or border nodes of the private network.

7. The method of claim 1, wherein the nodes of the private network comprise one or more is of routers, switches, and cloud services.

8. The method of claim 1, wherein the service provides network and security operations for the private network.

9. The method of claim 1, wherein the service facilitates managing and optimizing the private network.

10. The method of claim 1, wherein the service facilitates defending the private network from threats and attacks.

11. The method of claim 1, further comprising tagging the data.

12. The method of claim 1, further comprising storing the data.

13. The method of claim 1, wherein analyzing the received data comprises detecting a as network performance or security event.

14. The method of claim 1, wherein the output is generated by a rules engine of the service that is configured to map a detected event to an action.

15. The method of claim 1, wherein the output comprises a routing filter or block list.

16. The method of claim 1, wherein the output is communicated to the at least one or more nodes of the private network via Border Gateway Protocol (BGP) or FlowSpec.

17. The method of claim 1, wherein the output is communicated to the at least one or more nodes of the private network via an application programming interface (API) associated with the service.

18. The method of claim 1, further comprising providing a portal to the service that is accessible to an operator of the private network.

19. A system, comprising:

a processor configured to;

receive data from nodes of a private network, wherein the processor is associated with a service external to the private network;

analyze the received data; and

automatically generate an output in response to analyzing the data that facilitates modifying routing by at least one or more of the nodes of the private network; and

a memory coupled to the processor and configured to provide the processor with instructions.

20. A computer program product embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

receiving data from nodes of a private network, wherein the computer program product is associated with a service external to the private network;

analyzing the received data; and

automatically generating an output in response to analyzing the data that facilitates modifying routing by at least one or more of the nodes of the private network.