System and method of mapping and analyzing vulnerabilities in networks

• US 7,529,195 B2
• Filed: 07/30/2004
• Issued: 05/05/2009
• Est. Priority Date: 07/30/2004
• Status: Active Grant

• Current Assignee: Esri Technologies, LLC
• Original Assignee: FortiusOne , Inc. (Environmental Systems Research Institute Incorporated)
• Inventors: Gorman, Sean P.
• Primary Examiner(s): PHAM, BRENDA H
• Application Number:
  US10/902,283
• Publication Number:
  US 20080259815A1
• Time in Patent Office: 1,740 Days
• Field of Search: 370/254, 709/224, 726/25, 703/10, 703/11, 703/16, 703/6
• US Class Current: 370/254
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/16 using machine learning or artificial intelligence
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 43/0823 Errors, e.g. transmission errors
• CPC Class Codes: H04L 43/10 Active monitoring, e.g. heartbeat, ping or trace-route
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: Y04S 40/00 Systems for electrical power generation, transmission, distribution or end-user application management characterised by the use of communication or information technologies, or communication or information technology specific aspects supporting them
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

Systems and methods for mapping and analyzing vulnerabilities in networks. In one embodiment, a network is mapped, comprising: converting network line data into point data; associating the point data with cells of a grid overlaying the network; and analyzing the network by determining the relationship of the point data to the cells of the grid.

Claims

1. A computerized method for mapping at least one network, comprising:

employing at least one computer for;

converting electronic data for network line data into electronic data for point data for the at least one network;

associating the electronic data for the point data with electronic data for cells of at least one grid overlaying the at least one network;

determining at least one relationship of the point data to the cells of the at least one grid in order to enable performance of at least one mathematical operation on the at least one grid, and

performing at least one mathematical operation on the grid in order to indicate geographic concentration of at least one activity, the at least one mathematical operation comprising;

(1) computing a value for a total weight of points in each cell divided by and/or multiplied by a number of points in each cell; and

/or

(2) summing and/or subtracting the electronic data for the point data of the at least one grid with electronic data for point data for at least one additional network;

wherein the electronic data for the point data for the at least one additional network is converted from electronic data for network line data for the at least one additional network, and the electronic data for the point data for the at least one additional network is associated with cells of at least one additional grid overlaying the at least one additional network.

2. The method of claim 1, the point data comprises attribute data.

3. The method of claim 1, wherein the at least one network and/or the at least one additional network are/is a spatial network.

4. The method of claim 1, wherein the determining comprises determining critical cells based on the associating.

5. The method of claim 1, wherein the analyzing comprises determining the number of points in each of the cells.

6. The method of claim 1, wherein the analyzing comprises assigning a weight to each point of the point data.

7. The method of claim 6, further comprising determining the total weight of points in each of the cells.

8. The method of claim 1, further comprising:

removing at least one cell from the at least one grid and/or the at least one additional grid; and

examining at least one effect on the at least one network and/or the at least one additional network caused by removing the at least one cell.

9. The method of claim 1, wherein the associating comprises:

creating at least a second network based on the at least one relationship of the point data to the cells.

10. The method of claim 9, further comprising:

creating a cell adjacency list based on which cells are adjacent to each other; and

determining disjoint paths between cells based on the cell adjacency list.

11. The method of claim 10, wherein disjointness of paths is calculated utilizing a ratio of a sum of common cells of the disjoint paths divided by a sum of the cells of the disjoint paths.

12. The method of claim 1, wherein the network line data comprises:

satellite imagery data;

digitized map data;

or

any combination of the above.

13. The method of claim 1, wherein the network data comprises:

static network data;

dynamic network data;

satellite network data;

telecommunication data;

marketing data;

demographic data;

business data;

right-of-way routing data;

or

regional location data;

or

any combination of the above.

14. The method of claim 13, wherein the telecommunication data comprises:

metropolitan area fiber data;

long haul fiber data;

co-location facilities data;

internet exchanges data;

wireless tower data;

wire center data;

undersea cables data;

undersea cable landings data;

or

data center data;

or

any combination of the above.

15. The method of claim 13, wherein the right-of-way routing data comprises:

gas pipeline data;

oil pipeline data;

highway data;

rail data;

or

electric power transmission lines data;

or

any combination of the above.

16. The method of claim 13, wherein the static network data comprises:

ip network data;

or

network topology data;

or

any combination of the above.

17. The method of claim 13, wherein the dynamic network data comprises network traffic data.

18. The method of claim 1, wherein the network data is obtained by:

purchasing data;

manually constructing data;

mining data from external sources;

probing networks;

tracing networks;

accessing proprietary data;

or

digitizing hard copy data;

or

any combination of the above.

19. The method of claim 13, wherein the regional location data includes at least one of:

continent information;

nation information;

state information;

county information;

zip code information;

census block information;

census track information;

time information;

metropolitan information;

or

functional information;

or

any combination of the above.

20. The method of claim 19, wherein the functional information is defined using at least one of:

a formula;

a federal reserve bank region;

a trade zone;

a census region;

or

a monetary region;

or

any combination of the above.

21. A computerized system for mapping at least one network, comprising:

at least one server coupled to the at least one network;

at least one user terminal coupled to the at least one network;

at least one application coupled to the at least one server and/or the at least one user terminal, wherein the at least one application is configured for;

converting electronic data for network line data into electronic data for point data for the at least one network;

associating the electronic data for the point data with electronic data for cells of at least one grid overlaying the at least one network;

determining at least one relationship of the point data to the cells of the at least one grid in order to enable performance of at least one mathematical operation on the at least one grid, and

performing at least one mathematical operation on the grid in order to indicate geographic concentration of at least one activity, the at least one mathematical operation comprising;

(1) computing a value for a total weight of points in each cell divided by and/or multiplied by a number of points in each cell; and

/or

(2) summing and/or subtracting the electronic data for the point data of the at least one grid with electronic data for point data for at least one additional network;

wherein the electronic data for the point data for the at least one additional network is converted from electronic data for network line data for the at least one additional network, and the electronic data for the point data for the at least one additional network is associated with cells of at least one additional grid overlaying the at least one additional network.

22. The system of claim 21, wherein the point data comprises attribute data.

23. The system of claim 21, wherein the at least one network and/or the at least one additional network are/is a spatial network.

24. The system of claim 21, wherein the determining comprises determining critical cells based on the associating.

25. The system of claim 21, wherein the analyzing comprises determining the number of points in each of the cells.

26. The system of claim 21, wherein the analyzing comprises assigning a weight to each point of the point data.

27. The system of claim 21, wherein the at least one application is further configured for comprising determining the total weight of points in each of the cells.

28. The system of claim 21, wherein the at least one application is further configured for:

removing at least one cell from the at least one grid and/or the at least one additional grid; and

examining at least one effect on the at least one network and/or the at least one additional network caused by removing the at least one cell.

29. The system of claim 21, wherein the associating comprises:

creating a second network based on the at least one relationship of the point data to the cells.

30. The system of claim 21, wherein the at least one application is further configured for:

creating a cell adjacency list based on which cells are adjacent to each other; and

determining disjoint paths between cells based on the cell adjacency list.

31. The system of claim 30, wherein disjointness of paths is calculated utilizing a ratio of a sum of common cells of the disjoint paths divided by a sum of the cells of the disjoint paths.

32. The system of claim 21, wherein the network line data comprises:

satellite imagery data;

digitized map data;

or

any combination of the above.

33. The system of claim 21, wherein the network line data comprises:

static network data;

dynamic network data;

satellite network data;

telecommunication data;

marketing data;

demographic data;

business data;

right-of-way routing data;

or

regional location data;

or

any combination of the above.

34. The system of claim 33, wherein the telecommunication data comprises:

metropolitan area fiber data;

long haul fiber data;

co-location facilities data;

internet exchanges data;

wireless tower data;

wire center data;

undersea cables data;

undersea cable landings data;

or

data center data;

or

any combination of the above.

35. The system of claim 34, wherein the right-of-way routing data comprises:

gas pipeline data;

oil pipeline data;

highway data;

rail data;

or

electric power transmission lines data;

or

any combination of the above.

36. The system of claim 33, wherein the static network data comprises:

ip network data;

or

network topology data;

or

any combination of the above.

37. The system of claim 33, wherein the dynamic network data comprises network traffic data.

38. The system of claim 21, wherein the network line data is obtained by:

purchasing data;

manually constructing data;

mining data from external sources;

probing networks;

tracing networks;

accessing proprietary data;

or

digitizing hard copy data;

or

any combination of the above.

39. The system of claim 33, wherein the regional location data includes at least one of:

continent information;

nation information;

state information;

county information;

zip code information;

census block information;

census track information;

time information;

metropolitan information;

or

functional information;

or

any combination of the above.

40. The system of claim 39, wherein the functional information is defined using at least one of:

a formula;

a federal reserve bank region;

a trade zone;

a census region;

or

a monetary region;

or

any combination of the above.