Illicit route viewing system and method of operation
AssigneeLevel 3 Communications, LLC
InventorsMichael Benjamin, Skyler J. Bingham, John S. Reynolds
Life of this patent
Estimating the term…
Abstract
A route viewing system includes a computing system that receives information associated with one or more routes through a network, and identifies the routes that are associated with at least one illicit user computer used by an illicit user. The computing system then obtains a source location of a source address of the routes and a destination location of a destination address of the routes, and displays the routes on a geographical display at the source location of the source address and the destination location of the destination address of each of the routes.
Claims16
A route viewing system comprising:
- a computing system in communication with a network service computing device and comprising at least one memory for storing instructions that are executed by at least one processor to;
- receive information associated with one or more routes through a network;
- identify the routes that are associated with at least one illicit user computer used by an illicit user;
- obtain a source location of a source address of the routes associated with at least one illicit user computer and a destination location of a destination address of the routes associated with at least one illicit user computer;
- display the routes on a geographical display showing the source location of the source address and the destination location of the destination address of each of the routes;
- monitor communication across the routes associated with at least one illicit user computer;
- and
- filter the identified routes according to one or more weighting values associated with one or more characteristics of the route, wherein the characteristics of the route include at least one of a type of malicious behavior associated with the route, the illicit user associated with the route, and a geographical region associated with the route.
A route viewing method comprising:
- receiving, using instructions stored in at least one memory and executed by at least one processor, information associated with one or more routes through a network;
- identifying, using the instructions, the routes that are associated with at least one illicit user computer used by an illicit user;
- obtaining, using the instructions, a source location of a source address of the routes associated with at least one illicit user computer and a destination location of a destination address of the routes associated with at least one illicit user computer;
- displaying, using the instructions, the routes on a geographical display showing the source location of the source address and the destination location of the destination address of each of the routes;
- monitoring communication across the routes associated with at least one illicit user computer;
- and
- filtering the identified routes according to one or more weighting values associated with one or more characteristics of the route, wherein the characteristics of the route include at least one of a type of malicious behavior associated with the route, the illicit user associated with the route, and a geographical region associated with the route.
Code implemented in a non-transitory, computer readable medium that when executed by at least one processor, is operable to perform at least the following:
- receiving information associated with one or more routes through a network;
- identifying the routes that are associated with at least one illicit user computer used by an illicit user;
- obtaining a source location of a source address of the routes associated with at least one illicit user computer and a destination location of a destination address of the routes associated with at least one illicit user computer;
- displaying the routes on a geographical display showing the source location of the source address and the destination location of the destination address of each of the routes;
- monitoring communication across the routes associated with at least one illicit user computer;
- and
- filtering the identified routes according to one or more weighting values associated with one or more characteristics of the route, wherein the characteristics of the route include at least one of a type of malicious behavior associated with the route, the illicit user associated with the route, and a geographical region associated with the route.
Dependencies are inferred from the claim text.