Methods, systems, and products for estimating answers to questions
First Claim
Patent Images
1. A method of detecting a server operating in a network, comprising:
- collecting Internet Protocol traffic information;
merging the Internet Protocol traffic information having a common source address and a common destination address;
merging the Internet Protocol traffic information having a source address and an opposing destination address to generate bidirectional flows;
separating valid bidirectional flows from invalid bidirectional flows;
retrieving a set of heuristic rules from memory for determining the server;
determining an output of each heuristic rule in the set of heuristic rules based on the valid bidirectional flows;
combining all outputs produced by the set of heuristic rules; and
generating a probability that the source address corresponds to the server based on combined outputs produced by the set of heuristic rules.
2 Assignments
0 Petitions
Accused Products
Abstract
Methods, systems, and products answer questions using heuristics. A question and an input are received. A set of heuristic rules is retrieved, and the question is answered by evaluating an accuracy of each heuristic rule. Multiple accuracies from the set of heuristic rules are combined to produce a confidence level for the answer to the question.
19 Citations
20 Claims
-
1. A method of detecting a server operating in a network, comprising:
-
collecting Internet Protocol traffic information; merging the Internet Protocol traffic information having a common source address and a common destination address; merging the Internet Protocol traffic information having a source address and an opposing destination address to generate bidirectional flows; separating valid bidirectional flows from invalid bidirectional flows; retrieving a set of heuristic rules from memory for determining the server; determining an output of each heuristic rule in the set of heuristic rules based on the valid bidirectional flows; combining all outputs produced by the set of heuristic rules; and generating a probability that the source address corresponds to the server based on combined outputs produced by the set of heuristic rules. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A system, comprising:
-
a processor; and memory storing code that when executed causes the processor to perform operations, the operations comprising; collecting Internet Protocol traffic information; merging the Internet Protocol traffic information having a common source address and a common destination address to generate unidirectional flows; merging the Internet Protocol traffic information having a source address and an opposing destination address to generate bidirectional flows; separating valid bidirectional flows from invalid bidirectional flows; retrieving a set of heuristic rules from memory for determining the server, wherein one heuristic rule differentiates the server from a client based on a difference in timestamps of the unidirectional flows; determining an output of each heuristic rule in the set of heuristic rules based on the valid bidirectional flows; combining all outputs produced by the set of heuristic rules; and generating a probability that the source address corresponds to the server based on combined outputs produced by the set of heuristic rules. - View Dependent Claims (9, 10, 11, 12, 13, 14)
-
-
15. A memory storing executable instructions that when executed cause a processor to perform operations, the operations comprising:
-
collecting Internet Protocol traffic information; merging the Internet Protocol traffic information having a common source address and a common destination address to generate unidirectional flows; merging the Internet Protocol traffic information having a source address and an opposing destination address to generate bidirectional flows; separating valid bidirectional flows from invalid bidirectional flows; retrieving a set of heuristic rules from memory, the set of heuristic rules differentiating the server from a client based on a difference in timestamps of the unidirectional flows; determining an output of each heuristic rule in the set of heuristic rules based on the valid bidirectional flows; combining all outputs produced by the set of heuristic rules; and generating a probability that the source address corresponds to the server based on combined outputs produced by the set of heuristic rules. - View Dependent Claims (16, 17, 18, 19, 20)
-
Specification