Information security analysis system

• US 6,304,262 B1
• Filed: 07/19/1999
• Issued: 10/16/2001
• Est. Priority Date: 07/21/1998
• Status: Expired due to Term

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Raytheon Company (Rtx Corporation)
• Inventors: Suit, John M., Scott, Christopher J., Woodus, Francis M., Karolchik, Joseph, Maloney, Michael P., Rubel, Rich
• Primary Examiner(s): Nguyen, Phu K.
• Application Number:
  US09/357,540
• Time in Patent Office: 820 Days
• Field of Search: 345/433, 345/435, 345/419, 345/418, 345/473, 345/474, 345/475, 345/117, 345/118
• US Class Current: 345/418
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/022 by sampling
• CPC Class Codes: H04L 43/0811 by checking connectivity
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 43/10 Active monitoring, e.g. heartbeat, ping or trace-route
• CPC Class Codes: H04L 43/12 Network monitoring probes
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00

Abstract

The analysis system is a collection, configuration and integration of software programs that reside on multiple interconnected computer platforms. The software, less computer operating systems, is a combination of sensor, analysis, data conversion, and visualization programs. The hardware platforms consist of several different types of interconnected computers, which share the software programs, data files, and visualization programs via a Local Area Network (LAN). This collection and integration of software and the migration to a single computer platform results in an approach to LAN/WAN monitoring in either a passive and/or active mode. The architecture permits digital data input from external sensors for analysis, display and correlation with data and displays derived from four major software concept groups. These are: Virus Computer Code Detection; Analysis of Computer Source and Executable Code; Dynamic Monitoring of Data Communication Networks; 3-D Visualization and Animation of Data.

Claims

1. A method of visualization and animation of a digital communications network, comprising:

retrieving network related data for visualization and animation of a digital communication network;

transferring the retrieved network data to a visualization processor;

transferring a visualization setup file to the visualization processor;

transferring a linking information file to the visualization processor;

processing the network data, visualization setup, and linking information in the visualization processor, to generate network data signals for display;

transferring the generated network data signals to a rendering engine; and

processing in the rendering engine the generated network data signals to output network display signals.

2. A method of visualization and animation of a digital communications network as set forth in claim 1 wherein retrieving network related data comprises retrieving connectivity and functionality data and wherein processing the generated network data signals outputs network connectivity and functionality display signals.

3. The method of visualization and animation of a digital communications network as set forth in claim 1 wherein retrieving network related data comprises retrieving physical and virtual characteristic data of the communications network, and processing the generated network data signals outputs network physical and virtual characteristic display signals.

4. A method of visualization and animation of a digital communications network as set forth in claim 1 wherein retrieving network related data comprises retrieving source code and executable code network data, and processing the generated network data signals outputs network source code and executable code display signals.

5. A method of visualization and animation of a digital communications network as set forth in claim 1 wherein retrieving network related data comprises retrieved information from a host computer on the bit stream of the computer code prior to execution by the host computer and processing the generated network data signals outputs computer code display signals.

6. A method for 3-D visualization and animation of a digital communications network, comprising:

storing a visualization set-up data file to supply information and data for processing;

accessing on a selective basis the stored visualization set-up data file;

transferring the accessed file data to a visualization processor;

retrieving network related data for visualization and animation of a digital communications network;

transferring the retrieved network related data to the visualization processor;

processing the accessed file data and the network related data to generate network data signals for display;

transferring the generated network data signals to a 3-D rendering engine; and

processing in the 3-D rendering engine the generated network data signals to output network related display signals.

7. A method of visualization and animation of a digital communications network as set forth in claim 6 further comprising generating user input data for control of the 3-D rendering engine;

and processing in the 3-D rendering engine comprises processing the user input data and the generated network data signals to output network related display signals in accordance with the user input data.

8. A method of visualization and animation of a digital communications network as set forth in claim 6 further comprising:

storing a field key file for subsequent processing; and

accessing on a selective basis comprises accessing the visualization set-up data file and the field key file.

9. A method of visualization and animation of a digital communications network as set forth in claim 8 further comprising generating user input data for control of the 3-D rendering engine;

and processing in the 3-D rendering engine comprises processing the user input data and the generated network data signals to output network related display signals in accordance with the user input data.

10. A method of visualization and animation of digital communications network as set forth in claim 9 wherein retrieving network related data comprises retrieving connectivity and functionality data and wherein processing the generated network data signals outputs network connectivity and functionality display signals.

11. A method of visualization and animation of digital communications network as set forth in claim 9 wherein retrieving network related data comprises retrieving physical and virtual characteristic data of the communications network, and processing the generated network data signals outputs network physical and virtual characteristic display signals.

12. A method of visualization and animation of digital communications network as set forth in claim 9 wherein retrieving network related data comprises retrieving source code and executable code network data, and processing the generated network data signals outputs network source code and executable code display signals.

13. A method of visualization and animation of digital communications network as set forth in claim 9 wherein retrieving network related data comprises retrieved information from a host computer on the bit stream of the computer code prior to execution by the host computer and processing the generated network data signals outputs computer code display signals.

14. A method of 3-D visualization and animation of a plurality of digital communications networks, comprising:

storing a visualization set-up data file to supply information and data for processing;

storing a network linking data file related to each of the plurality of digital communications networks;

storing a field key file for subsequent processing;

accessing on a selective basis each of the stored files;

transferring the accessed file data to a visualization processor;

retrieving data related to each of the plurality of digital communications networks;

transferring the retrieved data to the visualization processor;

processing the accessed file data, the connectivity data and the functionality data to generate network data signals for display;

generating user input data for control of a 3-D rendering engine;

transferring the generated network data signals to the 3-D rendering engine; and

processing in the 3-D rendering engine the user input data and the generated network data signals to output network connectivity and functionality display signals in accordance with the user input data.

15. A method of visualization and animation of a digital communications network as set forth in claim 14 wherein retrieving network related data comprises retrieving connectivity and functionality data and wherein processing the generated network data signals outputs network connectivity and functionality display signals.

16. The method of visualization and animation of a digital communications network as set forth in claim 14 wherein retrieving network related data comprises retrieving physical and virtual characteristic data of the communications network, and processing the generated network data signals outputs network physical and virtual characteristic display signals.

17. A method of visualization and animation of a digital communications network as set forth in claim 14 wherein retrieving network related data comprises retrieving source code and executable code network data, and processing the generated network data signals outputs network source code and executable code display signals.

18. A method of visualization and animation of a digital communications network as set forth in claim 14 wherein retrieving network related data comprises retrieved information from a host computer on the bit stream of the computer code prior to execution by the host computer and processing the generated network data signals outputs computer code display signals.