Automated Security Analytics Platform with Multi-Level Representation Conversion for Space Efficiency and Incremental Persistence
AssigneeClick Security, Inc.
InventorDonovan Kolbly
Life of this patent
Estimating the term…
Abstract
Active memory for managing network telemetry information, or other types of information stored as objects, has objects partially-serialized to allow greater amounts of information to store in a memory of a given size with slightly increased retrieval times. Storing additional information in an active memory provides an overall increase in network security platform responsiveness by allowing a greater amount of information to be accessible from the active memory instead of archive.
Claims30
A method for managing network information stored in an active memory for interaction with a network security platform, the method comprising:
- storing the network information as plural objects in the active memory in non-serialized form;
- accessing at least some of the plural objects from the active memory with the network security platform;
- selectively converting less than all of the plural objects into a serialized form for storage in the active memory;
- and
- accessing at least some of the less than all of the plural objects that were converted into serialized form with the network security platform from the active memory to detect a network security threat, the accessing performed at least in part by converting the at least some of the less than all of the plural objects from the serialized form to the non-serialized form.
A method for managing network information stored in an active memory for interaction with a network security platform, the method comprising:
- storing the network information as plural objects in the active memory;
- accessing at least some of the plural objects with the network security platform;
- selectively converting less than all of the plural objects into a serialized form in the active memory;
- and
- accessing at least some of the less than all of the plural objects with the network security platform.
10-16. (canceled)
A system for managing network information stored in an active memory for interaction with a network security platform, the system comprising:
- a processor operable to process the network information by executing the network security platform to retrieve the network information from the active memory;
- an active memory interfaced with the processor, the active memory storing the network information for access by the processor;
- a memory allocation module interfaced with the active memory and operable to selectively convert the network information in the active memory from fully-realized objects to partially-serialized objects;
- wherein the network information is selected to convert based upon one or more predetermined factors.
A machine readable medium comprising instructions operable to execute on a processor to manage information stored in random access memory to:
- select at least some of the information to store in the random access memory as fully realized objects;
- select at least some of the information to store in the random access memory as partially-serialized objects;
- and
- provide access by an application running on the processor to both the fully realized objects and the partially-serialized objects.
Dependencies are inferred from the claim text.