System and method for real time data awareness
First Claim
Patent Images
1. A system, comprising:
- a sensor configured to;
passively read data in packets as the packets are in motion on a network;
a processor, being a hardware processor, cooperatively operable with the sensor, and configured to;
receive the read data from the sensor;
originate real-time map profiles of files and file data, both from the read data from the sensor, as the passively read packets are in motion on the network,wherein the map profile is a topographical map of locations of the files on the network,wherein the map profile further designates hosts which contain the files, destinations to where the files were transferred, and file directories of the files on the hosts and destinations;
extract metadata from the read data in the passively read packets to generate passively discovered metadata, as the packets are in motion on the network, the read data including;
the main hash of the entire file, the block hash of individual blocks within the file, the directory listing of files with file names, dates, time stamps, size, and file owners;
the hash being a cryptographic hash unique to the file;
store the passively discovered metadata, attributes of the files, and the file data, in a relational database; and
store the passively discovered metadata in a data map of passively discovered metadata.
3 Assignments
0 Petitions
Accused Products
Abstract
A system includes a sensor and a processor. The sensor is configured to passively read data in packets as the packets are in motion on a network. The processor is cooperatively operable with the sensor The processor is configured to receive the read data from the sensor; and originate real-time map profiles of files and file data, both from the read data from the sensor, as the passively read packets are in motion on the network.
240 Citations
23 Claims
-
1. A system, comprising:
-
a sensor configured to; passively read data in packets as the packets are in motion on a network; a processor, being a hardware processor, cooperatively operable with the sensor, and configured to; receive the read data from the sensor; originate real-time map profiles of files and file data, both from the read data from the sensor, as the passively read packets are in motion on the network, wherein the map profile is a topographical map of locations of the files on the network, wherein the map profile further designates hosts which contain the files, destinations to where the files were transferred, and file directories of the files on the hosts and destinations; extract metadata from the read data in the passively read packets to generate passively discovered metadata, as the packets are in motion on the network, the read data including;
the main hash of the entire file, the block hash of individual blocks within the file, the directory listing of files with file names, dates, time stamps, size, and file owners;
the hash being a cryptographic hash unique to the file;store the passively discovered metadata, attributes of the files, and the file data, in a relational database; and store the passively discovered metadata in a data map of passively discovered metadata. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15)
-
-
16. A method, comprising:
-
in a sensor, passively reading data in packets as the packets are in motion on a network; in a processor, being a hardware processor, receiving the read data from the sensor; originating real-time map profiles of files and file data from the read data, both from the sensor, as the passively read packets are in motion on the network, wherein the map profile is a topographical map of locations of the files on the network, wherein the map profile further designates hosts which contain the files, destinations to where the files were transferred, and file directories of the files on the hosts and destinations; extracting metadata from the read data in the passively read packets to generate passively discovered metadata, as the packets are in motion on the network, the read data including;
the main hash of the entire file, the block hash of individual blocks within the file, the directory listing of files with file names, dates, time stamps, size, and file owners;
the hash being a cryptographic hash unique to the file;storing the passively discovered metadata, attributes of the files, and the file data, in a relational database; and storing the passively discovered metadata in a data map of passively discovered metadata. - View Dependent Claims (17, 18, 19)
-
-
20. A non-transitory computer-readable storage medium comprising computer-executable instructions for performing the steps of:
-
passively reading, from a sensor, data in packets as the packets are in motion on a network; receiving, in a processor, the read data from the sensor; originating real-time map profiles of files and file data, both from the read data from the sensor, as the passively read packets are in motion on the network, wherein the map profile is a topographical map of locations of the files on the network, wherein the map profile further designates hosts which contain the files, destinations to where the files were transferred, and file directories of the files on the hosts and destinations; extracting metadata from the read data in the passively read packets to generate passively discovered metadata, as the packets are in motion on the network, the read data including;
the main hash of the entire file, the block hash of individual blocks within the file, the directory listing of files with file names, dates, time stamps, size, and file owners;
the hash being a cryptographic hash unique to the file;storing the passively discovered metadata, attributes of the files, and the file data, in a relational database; and storing the passively discovered metadata in a data map of passively discovered metadata. - View Dependent Claims (21, 22, 23)
-
Specification