Systems and methods for identifying confidence measures of network rules
AssigneeAetna Inc.
InventorsAndrew Hinton, Salil Jain, Christopher Durand
Life of this patent
Estimating the term…
Abstract
In some instances, a method for generating network traffic rules for a cloud environment is provided. The method comprises: converting a plurality of internet protocol (IP) addresses from a plurality of network traffic rules into a plurality of integer pair representations of the IP addresses; determining a plurality of similarity values based on the plurality of integer pair representations of the IP addresses and a similarity algorithm; determining stability of one or more of the plurality of network traffic rules based on the plurality of similarity values and one or more thresholds; and applying the one or more of the plurality of network traffic rules that are determined to be stable.
Claims20
A method for generating network traffic rules for a cloud environment, comprising:
- converting a plurality of internet protocol (IP) addresses from a plurality of network traffic rules into a plurality of integer pair representations of the IP addresses, wherein each of the plurality of network traffic rules comprises a first IP address that is an upper bound IP address and a second IP address that is a lower bound IP address;
- determining a plurality of vectors of binary values based on the plurality of integer pair representations, wherein each of the plurality of vectors of binary values comprises a plurality of entries with values of 1 or 0 based on the upper bound IP addresses and the lower bound IP addresses from the plurality of network traffic rules;
- determining a plurality of similarity values based on the plurality of vectors of binary values and a similarity algorithm;
- determining stability of one or more of the plurality of network traffic rules based on the plurality of similarity values and one or more thresholds;
- and
- applying the one or more of the plurality of network traffic rules that are determined to be stable.
An enterprise organization cloud computing platform for generating network traffic rules for a cloud environment, comprising:
- one or more processors;
- and
- a non-transitory computer-readable medium having processor-executable instructions stored thereon, wherein the processor-executable instructions, when executed by the one or more processors, facilitate:
- converting a plurality of internet protocol (IP) addresses from a plurality of network traffic rules into a plurality of integer pair representations of the IP addresses, wherein each of the plurality of network traffic rules comprises a first IP address that is an upper bound IP address and a second IP address that is a lower bound IP address;
- determining a plurality of vectors of binary values based on the plurality of integer pair representations, wherein each of the plurality of vectors of binary values comprises a plurality of entries with values of 1 or 0 based on the upper bound IP addresses and the lower bound IP addresses from the plurality of network traffic rules;
- determining a plurality of similarity values based on the plurality of vectors of binary values and a similarity algorithm;
- determining stability of one or more of the plurality of network traffic rules based on the plurality of similarity values and one or more thresholds;
- and
- applying the one or more of the plurality of network traffic rules that are determined to be stable.
A non-transitory computer-readable medium having processor-executable instructions stored thereon, wherein the processor-executable instructions, when executed, facilitate:
- converting a plurality of internet protocol (IP) addresses from a plurality of network traffic rules into a plurality of integer pair representations of the IP addresses, wherein each of the plurality of network traffic rules comprises a first IP address that is an upper bound IP address and a second IP address that is a lower bound IP address;
- determining a plurality of vectors of binary values based on the plurality of integer pair representations, wherein each of the plurality of vectors of binary values comprises a plurality of entries with values of 1 or 0 based on the upper bound IP addresses and the lower bound IP addresses from the plurality of network traffic rules;
- determining a plurality of similarity values based on the plurality of vectors of binary values and a similarity algorithm;
- determining stability of one or more of the plurality of network traffic rules based on the plurality of similarity values and one or more thresholds;
- and
- applying the one or more of the plurality of network traffic rules that are determined to be stable.
Dependencies are inferred from the claim text.