Systems and methods for categorizing network traffic content
First Claim
1. A method of categorizing network traffic content comprising:
- receiving, via a network interface device, network traffic content from a network in a network traffic content categorization module;
performing, through execution of instructions on a processor, analysis on the network traffic content within the network traffic content categorization module according to at least one analysis technique to obtain at least one categorization of the network traffic content and a probability of accuracy of each of the at least one categorizations, the at least one analysis performed as a function of a database of known categorization properties of network traffic content;
storing, on a data storage device, by the network traffic content categorization module, a representation of the categorization and data derived from the network traffic content; and
categorizing subsequently received network traffic content according to the at least one analysis technique as a function of the stored representation of the categorization when the probability of accuracy at least meets an accuracy threshold.
0 Assignments
0 Petitions
Accused Products
Abstract
A method for categorizing network traffic content includes determining a first characterization of the network traffic content determining a first probability of accuracy associated with the first characterization, and categorizing the network traffic content based at least in part on the first characterization and the first probability of accuracy. A method for use in a process to categorize network traffic content includes obtaining a plurality of data, each of the plurality of data representing a probability of accuracy of a characterization of network traffic content, and associating each of the plurality of data with a technique for characterizing network traffic content. A method for categorizing network traffic content includes determining a characterization of the network traffic content, determining a weight value associated with the characterization, and categorizing network traffic content based at least in part on the characterization of the network traffic content and the weight value.
26 Citations
18 Claims
-
1. A method of categorizing network traffic content comprising:
-
receiving, via a network interface device, network traffic content from a network in a network traffic content categorization module; performing, through execution of instructions on a processor, analysis on the network traffic content within the network traffic content categorization module according to at least one analysis technique to obtain at least one categorization of the network traffic content and a probability of accuracy of each of the at least one categorizations, the at least one analysis performed as a function of a database of known categorization properties of network traffic content; storing, on a data storage device, by the network traffic content categorization module, a representation of the categorization and data derived from the network traffic content; and categorizing subsequently received network traffic content according to the at least one analysis technique as a function of the stored representation of the categorization when the probability of accuracy at least meets an accuracy threshold. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A method of screening network traffic content comprising:
-
receiving, via a network interface device, network traffic content from a network in a network traffic content screening module; performing, through execution of instructions on a processor, analysis on the network traffic content within the network traffic content screening module according to at least one analysis technique to obtain at least one categorization of the network traffic content and a probability of accuracy of the at least one categorization, the at least one analysis performed as a function of a database of known categorization properties of network traffic content; determining, through execution of instructions on a processor, based on the at least one categorization of the network traffic content and the probability of accuracy of the at least one categorization, whether the network traffic content is undesirable content; when the network traffic content is undesirable content and the probability of accuracy at least meets an accuracy threshold, preventing the undesirable content from reaching its destination; and otherwise allowing the network traffic content to pass. - View Dependent Claims (9, 10, 11, 12, 13)
-
-
14. A non-transitory machine-readable storage medium, with instructions thereon which when executed by a processor of a machine, causes the machine to screen network traffic content by:
-
receiving network traffic content in a network traffic content screening module; performing analysis on the network traffic content within the network traffic content screening module according to at least one analysis technique to obtain at least one categorization of the network traffic content and a probability of accuracy of each of the at least one categorizations, the at least one analysis performed as a function of a database of known categorization properties of network traffic content; determining, through execution of instructions on a processor, based on the at least one categorization of the network traffic content and the probability of accuracy of the at least one categorization, whether the network traffic content is undesirable content; when the network traffic content is undesirable content and the probability of accuracy at least meets an accuracy threshold, preventing the undesirable content from reaching its destination; and otherwise allowing the network traffic content to pass. - View Dependent Claims (15, 16, 17, 18)
-
Specification