Key threat prediction
AssigneeCisco Technology, Inc.
InventorsDavid A. Maluf, Raghuram S. Sudhaakar, Nancy Cam-Winget
Life of this patent
Estimating the term…
Abstract
In one example embodiment, a network-connected device provides or obtains one or more computer network communications protected by a key. The network-connected device determines a count of the one or more computer network communications according to one or more properties of the one or more computer network communications. Based on the count of the one or more computer network communications, the network-connected device computes an information entropy of the key. Based on the information entropy of the key, the network-connected device dynamically generates a predicted threat level of the key.
Claims20
A method comprising:
- at a network-connected device:
- providing or obtaining a plurality of computer network communications protected by a key;
- determining a count of the plurality of computer network communications according to one or more properties of the plurality of computer network communications;
- based on the count of the plurality of computer network communications, computing an information entropy of the key;
- and
- based on the information entropy of the key, dynamically generating a predicted threat level of the key.
An apparatus comprising:
- a network interface configured to provide or obtain a plurality of computer network communications protected by a key;
- and
- one or more processors coupled to the network interface, wherein the one or more processors are configured to:
- determine a count of the plurality of computer network communications according to one or more properties of the plurality of computer network communications;
- based on the count of the plurality of computer network communications, compute an information entropy of the key;
- and
- based on the information entropy of the key, dynamically generate a predicted threat level of the key.
One or more non-transitory computer readable storage media encoded with instructions that, when executed by a processor of a network-connected device, cause the processor to:
- provide or obtain a plurality of computer network communications protected by a key;
- determine a count of the plurality of computer network communications according to one or more properties of the plurality of computer network communications;
- based on the count of the plurality of computer network communications, compute an information entropy of the key;
- and
- based on the information entropy of the key, dynamically generate a predicted threat level of the key.
Dependencies are inferred from the claim text.