×

Method for tracking machines on a network using multivariable fingerprinting of passively available information

  • US 8,176,178 B2
  • Filed: 01/29/2008
  • Issued: 05/08/2012
  • Est. Priority Date: 01/29/2007
  • Status: Expired due to Fees
First Claim
Patent Images

1. A method for fingerprinting a connecting host machine on a network, the method comprising:

  • forcing the connecting host into a TCP connection, wherein timestamps are transmitted with each packet associated with the connection;

    assigning a session handle to the connection, some or all of subsequent connections that are associated with the session handle being able to exchange data with one another;

    extending a longevity of the connection, the longevity allowing extended sampling of the host for the purposes of fingerprinting;

    sampling attributes associated with the connection;

    queuing the sampled attributes, IP address, and session handle to a correlator process, the correlator process including one or more algorithms for processing the sampled attributes;

    processing the sampled attributes, IP address, and session handle; and

    forming a fingerprint for the connecting host.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×