Network analysis method
First Claim
1. A network analysis method for use in relation to a network having a plurality of entitles each with associated traffic, the network analysis method comprisingperforming plural analysis tasks, each of the analysis tasks including (a) monitoring the network to collect data on entity traffic for a period of network operation, (b) analyzing the collected data in respect to an entity operational characteristic by which the entities can be ordered into a ranking, (c) forming an end set of at least one entity at one end of said ranking, and (d) storing the identity of the or each entity making up that end set;
- causing respective said analysis tasks to be carried out for each of a succession of N network operation periods (where N is an integer greater than unity) and forming an extended historical record of entities in said end sets for the N periods; and
carrying out another one of the said analysis tasks for a further one of said periods to produce a newly created end set, comparing the entities in the newly created end set with the entities in said extended historical record, an identifying and entity, herein an unusually-behaved entity, that is in the newly-created end set but not also in said record.
6 Assignments
0 Petitions
Accused Products
Abstract
A network analysis method for use in relation to a network having a plurality of entities, each with associated traffic, involves an analysis task comprising the steps of monitoring the network to collect data on entity traffic for a period of network operation, analyzing this data in respect of an entity operational characteristic by which the entities may be ordered into a ranking, forming an end set of at least one entity at one end of said ranking, and storing the identity of the or each entity making up that end set. The analysis task is carried out for a succession of N periods, where N is an integer greater than unity, to form an extended historical record of entities in the end sets for those N periods; the analysis task is then carried out for a further period and the entities in the resulting newly-created end set are compared with the entities in the extended historical record, to identify any entity (an `unusually-behaved` entity) that is in the newly-created end set but not also in the historical record.
135 Citations
20 Claims
-
1. A network analysis method for use in relation to a network having a plurality of entitles each with associated traffic, the network analysis method comprising
performing plural analysis tasks, each of the analysis tasks including (a) monitoring the network to collect data on entity traffic for a period of network operation, (b) analyzing the collected data in respect to an entity operational characteristic by which the entities can be ordered into a ranking, (c) forming an end set of at least one entity at one end of said ranking, and (d) storing the identity of the or each entity making up that end set; -
causing respective said analysis tasks to be carried out for each of a succession of N network operation periods (where N is an integer greater than unity) and forming an extended historical record of entities in said end sets for the N periods; and carrying out another one of the said analysis tasks for a further one of said periods to produce a newly created end set, comparing the entities in the newly created end set with the entities in said extended historical record, an identifying and entity, herein an unusually-behaved entity, that is in the newly-created end set but not also in said record. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20)
-
Specification