System, method, and computer program product for managing at least one aspect of a connection based on application behavior

• US 8,850,029 B2
• Filed: 02/14/2008
• Issued: 09/30/2014
• Est. Priority Date: 02/14/2008
• Status: Expired due to Fees

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Melnyk, Mykhaylo, Mathews, Justin A.
• Primary Examiner(s): THIAW, CATHERINE B
• Application Number:
  US12/031,488
• Publication Number:
  US 20130246628A1
• Time in Patent Office: 2,420 Days
• Field of Search: 709223-235, 709203-206, 370/352, 726 11- 13, 726 22- 25, 726/16
• US Class Current: 709/227
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/1055 involving connection limits involving dynamic management of active down- or uploading connections H04L67/1085
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/61 taking into account QoS or priority requirements

Abstract

A system, method, and computer program product are provided for managing at least one aspect of a connection based on application behavior. In use, a connection request is received from an application. Additionally, a behavior of the application is identified. Furthermore, at least one aspect of a connection made in response to the connection request is managed, based on the behavior.

Claims

1. A computer program product, embodied on a non-transitory computer readable medium, that, when executed, causes a processor to perform a method comprising:

receiving a connection request from an application, at a proxy, wherein the connection request is associated with exchanging data;

setting a rank for the application to a default rank, in response to a determination that the connection request is a first request from the application;

increasing the rank, after each reception of a number of connection requests from the application over a first predetermined time period;

identifying whether the application is a peer-to-peer application at least based on the rank;

determining a priority of a connection of the connection request, at the proxy, at least based on whether the application is the peer-to-peer application;

attempting the connection, at the proxy, in an order at least based on the priority of the connection;

calculating a timeout value for the connection inversely proportionate to the rank, wherein the timeout value is utilized for determining a time period in which the connection is to be attempted; and

decreasing the rank, if a second predetermined time period has elapsed.

2. The computer program product of claim 1, the method further comprising:

determining whether the second predetermined time period has elapsed.

3. The computer program product of claim 1, the method further comprising:

determining whether the connection request is the first request from the application.

4. The computer program product of claim 1, wherein the timeout value is at least based on a logarithm of the rank of the application.

5. The computer program product of claim 1, wherein, if the application is not the peer-to-peer application, the priority of the connection is increased.

6. The computer program product of claim 1, the method further comprising:

alerting a device on which peer-to-peer behavior is originating, based on the ranking exceeding a threshold value.

7. The computer program product of claim 1, the method further comprising:

terminating an attempt to make the connection, in response to the time period ending.

8. The computer program product of claim 1, wherein the rank is only decreased until the rank equals the default rank.

9. A method, comprising:

receiving a connection request from an application, at a proxy that includes a processor and a memory and that is configured to exchange electronic packets in a network environment, wherein the connection request is associated with exchanging data;

setting a rank for the application to a default rank, in response to a determination that the connection request is a first request from the application;

increasing the rank, after each reception of a number of connection requests from the application over a first predetermined time period;

identifying whether the application is a peer-to-peer application at least based on the rank;

determining a priority of a connection of the connection request, at the proxy, at least based on whether the application is the peer-to-peer application;

attempting the connection, at the proxy, in an order at least based on the priority of the connection;

calculating a timeout value for the connection inversely proportionate to the rank, wherein the timeout value is utilized for determining a time period in which the connection is to be attempted; and

decreasing the rank, if a second predetermined time period has elapsed.

10. The method of claim 9, wherein the timeout value is at least based on a logarithm of the rank.

11. The method of claim 9, wherein, if the application is not the peer-to-peer application, the priority of the connection is increased.

12. The method of claim 9, further comprising:

alerting a device on which peer-to-peer behavior is originating, based on the ranking exceeding a threshold value.

13. The method of claim 9, further comprising:

terminating an attempt to make the connection, in response to the time period ending.

14. A system, comprising:

a gateway device configured;

to receive a connection request from an application, wherein the connection request is associated with exchanging data,

to set a rank for the application to a default rank, in response to a determination that the connection request is a first request from the application,

to increase the rank, after each reception of a number of connection requests from the application over a first predetermined time period,

to identify whether the application is a peer-to-peer application at least based on the rank,

to determine a priority of a connection of the connection request at least based on whether the application is the peer-to-peer application,

to attempt the connection in an order at least based on the priority of the connection,

to calculate a timeout value for the connection inversely proportionate to the rank, wherein the timeout value is utilized for determining a time period in which the connection is to be attempted, and

to decrease the rank, if a second predetermined time period has elapsed.

15. The system of claim 14, wherein the gateway device runs the application.

16. The system of claim 14, wherein the timeout value is at least based on a logarithm of the rank.

17. The system of claim 14, wherein, if the application is not the peer-to-peer application, the priority of the connection is increased.

18. The system of claim 14, wherein a device on which peer-to-peer behavior is originating is alerted, based on the ranking exceeding a threshold value.

19. The system of claim 14, wherein the gateway device terminates an attempt to make the connection, in response to the time period ending.

20. The system of claim 14, wherein the rank is only decreased until the rank equals the default rank.