Methods, systems and computer program products for identifying traffic on the internet using communities of interest
First Claim
Patent Images
1. A method for identifying wanted traffic on the internet, comprising:
- determining a traffic history for a user of the internet;
identifying wanted traffic in a stream of internet traffic based on the traffic history;
prioritizing the wanted traffic such that unwanted traffic is assigned a lower priority than the wanted traffic, anddefining a heuristic, wherein identifying and prioritizing are performed based on the heuristic and wherein the heuristic comprises;
a low port number heuristic that defines traffic in the stream of internet traffic as wanted traffic if any port numbers involved in a connection are below 1024;
a low packet count heuristic that defines traffic in the stream of internet traffic as wanted traffic if five or fewer packets are seen in a flow; and
a reverse flow seen heuristic that defines traffic in the stream of internet traffic as wanted traffic if a flow has been seen between a same pair of IP addresses in an opposite direction within a previous seven day period,wherein determining, identifying, prioritizing and defining are performed by at least one processor.
1 Assignment
0 Petitions
Accused Products
Abstract
Methods for identifying wanted traffic on the Internet are provided. The methods include determining a traffic history for a user of the Internet; identifying wanted traffic in a stream of Internet traffic based on the determined traffic history; and prioritizing the identified wanted traffic such that unwanted traffic is assigned a lower priority than the wanted traffic. Related systems and computer program products are also provided.
-
Citations
14 Claims
-
1. A method for identifying wanted traffic on the internet, comprising:
-
determining a traffic history for a user of the internet; identifying wanted traffic in a stream of internet traffic based on the traffic history; prioritizing the wanted traffic such that unwanted traffic is assigned a lower priority than the wanted traffic, and defining a heuristic, wherein identifying and prioritizing are performed based on the heuristic and wherein the heuristic comprises; a low port number heuristic that defines traffic in the stream of internet traffic as wanted traffic if any port numbers involved in a connection are below 1024; a low packet count heuristic that defines traffic in the stream of internet traffic as wanted traffic if five or fewer packets are seen in a flow; and a reverse flow seen heuristic that defines traffic in the stream of internet traffic as wanted traffic if a flow has been seen between a same pair of IP addresses in an opposite direction within a previous seven day period, wherein determining, identifying, prioritizing and defining are performed by at least one processor. - View Dependent Claims (2, 3, 4, 5)
-
-
6. A data processing system for identifying wanted traffic on the internet, comprising:
-
a processor, the processor comprising; a history module to determine a traffic history for a user of the internet; an identification module to identify wanted traffic in a stream of internet traffic based on the traffic history; and a prioritization module to prioritize the identified traffic such that unwanted traffic is assigned a lower priority than the wanted traffic, wherein the history module further defines a heuristic, wherein the heuristic comprises; a low port number heuristic that defines traffic in the stream of internet traffic as wanted traffic if any port numbers involved in a connection are below 1024; a low packet count heuristic that defines traffic in the stream of internet traffic as wanted traffic if five or fewer packets are seen in a flow; and a reverse flow seen heuristic that defines traffic in the stream of internet traffic as wanted traffic if a flow has been seen between a same pair of IP addresses in an opposite direction within a previous seven day period, wherein the identification module identifies and the prioritization module prioritizes based on the heuristic. - View Dependent Claims (7, 8, 9)
-
-
10. A computer program product for identifying wanted traffic on the internet, comprising:
-
a non-transitory computer readable storage medium having computer readable program code embodied therein, the computer readable program code comprising; computer readable program code to determine a traffic history for a user of the internet; computer readable program code to identify wanted traffic in a stream of internet traffic based on the traffic history; computer readable program code to prioritize the wanted traffic such that unwanted traffic is assigned a lower priority than the wanted traffic; and computer readable program code to define a heuristic, wherein the computer program code to identify and the computer program code to prioritize are performed based on the heuristic and wherein the heuristic comprises; a low port number heuristic that defines traffic in the stream of internet traffic as wanted traffic if any port numbers involved in a connection are below 1024; a low packet count heuristic that defines traffic in the stream of internet traffic as wanted traffic if five or fewer packets are seen in a flow; and a reverse flow seen heuristic that defines traffic in the stream of internet traffic as wanted traffic if a flow has been seen between a same pair of IP addresses in an opposite direction within a previous seven day period. - View Dependent Claims (11, 12, 13, 14)
-
Specification