System and method of mapping and analyzing vulnerabilities in networks

• US 9,054,946 B2
• Filed: 02/26/2013
• Issued: 06/09/2015
• Est. Priority Date: 07/30/2004
• Status: Active Grant

• Current Assignee: Esri Technologies, LLC
• Original Assignee: Esri Technologies, LLC
• Inventors: Gorman, Sean P.
• Primary Examiner(s): Pham, Brenda H
• Application Number:
  US13/777,124
• Publication Number:
  US 20130246598A1
• Time in Patent Office: 833 Days
• Field of Search: 370/254, 726/25, 709/224
• US Class Current: 1/1
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/16 using machine learning or artificial intelligence
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 43/0823 Errors, e.g. transmission errors
• CPC Class Codes: H04L 43/10 Active monitoring, e.g. heartbeat, ping or trace-route
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: Y04S 40/00 Systems for electrical power generation, transmission, distribution or end-user application management characterised by the use of communication or information technologies, or communication or information technology specific aspects supporting them
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A system for mapping a network is described, where the system comprises a computer coupled to the network and a geographic information system (GIS). The GIS may be configured to convert network line data into point data for a network; associate the point data with cells of a grid overlaying the network; and analyze the network by determining the relationship of the point data to the cells of the grid.

Claims

1. A system for mapping a network, comprising:

a computer coupled to the network and comprising a geographic information system (GIS), the GIS being configured to;

perform, by the geographic information system, processing associated with converting network line data into point data for a network;

perform, by the geographic information system, processing associated with associating the point data with cells of a grid overlaying the network;

perform, by the geographic information system, processing associated with analyzing the network by determining the relationship of the point data to the cells of the grid;

perform, by the geographic information system, processing associated with removing at least one cell from the grid; and

perform, by the geographic information system, processing associated with examining the effect on the network caused by removing the at least one cell;

perform, by the geographic information system, processing associated with creating a cell adjacency list based on which cells are adjacent to each other; and

perform, by the geographic information system, processing associated with determining disjoint paths between cells based on the cell adjacency list.

2. The system of claim 1, wherein the GIS is configured to perform processing associated with assigning attribute data to the point data.

3. The system of claim 1, wherein a the network is a spatial network.

4. The system of claim 1, wherein the GIS is configured to perform the processing associated with analyzing the network by determining critical cells based on the association.

5. The system of claim 1, wherein the GIS is configured to perform the processing associated with analyzing the network by determining the number of points in each of the cells.

6. The system of claim 1, wherein the GIS is configured to perform the processing associated with analyzing the network by assigning a weight to each point of the point data.

7. The system of claim 6, wherein the GIS is configured to perform processing associated with determining the total weight of points in each of the cells.

8. The system of claim 1, wherein the GIS is configured to perform the processing associated with associating the point data with the cells by creating a second network based on the relationship of point data to cells.

9. The system of claim 8, wherein the GIS is configured to perform processing associated with:

creating a cell adjacency list based on which cells are adjacent to each other; and

determining disjoint paths between cells based on the cell adjacency list.

10. The system of claim 9, wherein the GIS is configured to perform processing associated with determining disjoint paths by calculating disjointness of paths utilizing the ratio of the sum of the common cells of the paths divided by the sum of the cells of the paths.

11. The system of claim 1, wherein the line data comprises:

satellite imagery data;

digitized map data;

or

any combination of the above.

12. The system of claim 1, wherein the network data comprises:

static network data;

dynamic network data;

satellite network data;

telecommunication data;

marketing data;

demographic data;

business data;

right-of-way routing data;

regional location data;

or

any combination of the above.

13. The system of claim 12, wherein the telecommunication data comprises:

metropolitan area fiber data;

long haul fiber data;

co-location facilities data;

internet exchanges data;

wireless tower data;

wire center data;

undersea cables data;

undersea cable landings data;

data center data;

or

any combination of the above.

14. The system of claim 12, wherein the right-of-way routing data comprises:

gas pipeline data;

oil pipeline data;

highway data;

rail data;

electric power transmission lines data;

or

any combination of the above.

15. The system of claim 12, wherein the static network data comprises:

IP network data;

network topology data;

or

any combination of the above.

16. The system of claim 12, wherein the dynamic network data comprises network traffic data.

17. The system of claim 1, wherein the network data is obtained by:

purchasing data;

manually constructing data;

mining data from external sources;

probing networks;

tracing networks;

accessing proprietary data;

digitizing hard copy data;

or

any combination of the above.

18. The system of claim 12, wherein the regional location data includes at least one of:

continent information;

nation information;

state information;

county information;

zip code information;

census block information;

census track information;

time information;

metropolitan information;

functional information;

or

any combination of the above.

19. The system of claim 18, wherein the functional information is defined using at least one of:

a formula;

a federal reserve bank region;

a trade zone;

a census region;

a monetary region;

or

any combination of the above.

20. A system for mapping a network, comprising:

a computer coupled to the network and comprising a geographic information system (GIS), the GIS being configured to;

perform, by the geographic information system, processing associated with converting network line data into point data for a network;

perform, by the geographic information system, processing associated with associating the point data with cells of a grid overlaying the network by creating a second network based on the relationship of point data to cells; and

perform, by the geographic information system, processing associated with analyzing the network by determining the relationship of the point data to the cells of the grid;

perform, by the geographic information system, processing associated with creating a cell adjacency list based on which cells are adjacent to each other; and

perform, by the geographic information system, processing associated with determining disjoint paths between cells based on the cell adjacency list.

21. The system of claim 20, wherein the GIS is further configured to:

create a cell adjacency list based on which cells are adjacent to each other; and

determine disjoint paths between cells based on the cell adjacency list.

22. A method for mapping a network, comprising:

employing at least one geographic information system (GIS) to;

perform processing associated with converting network line data into point data for a network;

perform processing associated with associating the point data with cells of a grid overlaying the network;

perform processing associated with analyzing the network by determining the relationship of the point data to the cells of the grid;

perform processing associated with removing at least one cell from the grid; and

perform processing associated with examining the effect on the network caused by removing the at least one cell;

perform, by the geographic information system, processing associated with creating a cell adjacency list based on which cells are adjacent to each other; and

perform, by the geographic information system, processing associated with determining disjoint paths between cells based on the cell adjacency list.

23. The method of claim 22, wherein the GIS is configured to perform processing associated with assigning attribute data to the point data.

24. The method of claim 22, wherein a the network is a spatial network.

25. The method of claim 22, wherein the GIS is configured to perform the processing associated with analyzing the network by determining critical cells based on the association.

26. The method of claim 22, wherein the GIS is configured to perform the processing associated with analyzing the network by determining the number of points in each of the cells.

27. The method of claim 22, wherein the GIS is configured to perform the processing associated with analyzing the network by assigning a weight to each point of the point data.

28. The method of claim 27, wherein the GIS is configured to perform processing associated with determining the total weight of points in each of the cells.

29. The method of claim 22, wherein the GIS is configured to perform the processing associated with associating the point data with the cells by creating a second network based on the relationship of point data to cells.

30. The method of claim 29, wherein the GIS is configured to perform processing associated with:

creating a cell adjacency list based on which cells are adjacent to each other; and

determining disjoint paths between cells based on the cell adjacency list.

31. The method of claim 30, wherein the GIS is configured to perform processing associated with determining disjoint paths by calculating disjointness of paths utilizing the ratio of the sum of the common cells of the paths divided by the sum of the cells of the paths.

32. The method of claim 22, wherein the line data comprises:

satellite imagery data;

digitized map data;

or

any combination of the above.

33. The method of claim 22, wherein the network data comprises:

static network data;

dynamic network data;

satellite network data;

telecommunication data;

marketing data;

demographic data;

business data;

right-of-way routing data;

regional location data;

or

any combination of the above.

34. The method of claim 33, wherein the telecommunication data comprises:

metropolitan area fiber data;

long haul fiber data;

co-location facilities data;

internet exchanges data;

wireless tower data;

wire center data;

undersea cables data;

undersea cable landings data;

data center data;

or

any combination of the above.

35. The method of claim 33, wherein the right-of-way routing data comprises:

gas pipeline data;

oil pipeline data;

highway data;

rail data;

electric power transmission lines data;

or

any combination of the above.

36. The method of claim 33, wherein the static network data comprises:

IP network data;

network topology data;

or

any combination of the above.

37. The method of claim 33, wherein the dynamic network data comprises network traffic data.

38. The method of claim 22, wherein the network data is obtained by:

purchasing data;

manually constructing data;

mining data from external sources;

probing networks;

tracing networks;

accessing proprietary data;

digitizing hard copy data;

or

any combination of the above.

39. The method of claim 33, wherein the regional location data includes at least one of:

continent information;

nation information;

state information;

county information;

zip code information;

census block information;

census track information;

time information;

metropolitan information;

functional information;

or

any combination of the above.

40. The method of claim 39, wherein the functional information is defined using at least one of:

a formula;

a federal reserve bank region;

a trade zone;

a census region;

a monetary region;

or

any combination of the above.

41. A method for mapping a network, comprising:

employing at least one geographic information system (GIC) to;

perform processing associated with converting network line data into point data for a network;

perform processing associated with associating the point data with cells of a grid overlaying the network by creating a second network based on the relationship of point data to cells;

perform processing associated with analyzing the network by determining the relationship of the point data to the cells of the grid;

perform processing associated with creating a cell adjacency list based on which cells are adjacent to each other; and

perform processing associated with determining disjoint paths between cells based on the cell adjacency list.

42. The system of claim 41, wherein the GIS is further configured to:

create a cell adjacency list based on which cells are adjacent to each other; and

determine disjoint paths between cells based on the cell adjacency list.