Contextual analyses of network traffic
AssigneeGreynoise Intelligence Inc.
InventorAndrew Kevin Morris
Life of this patent
Estimating the term…
Abstract
Systems and methods for analyzing network traffic are provided. An exemplary system may include a plurality of network nodes distributed in multiple geographical regions. The plurality of network nodes may be configured to collect mass scanning network traffic data. The system may also include at least one processor. The processor may be configured to receive, from a first network node, a first network scanning request from a source scanner. In response to the reception of the first network scanning request, the processor may also be configured to transmit, via a second network node, a second network scanning request to the source scanner. The processor may further be configured to determine, based on feedback from the source scanner, whether the source scanner is compromised.
Claims21
-36. (canceled)
A system for analyzing network traffic, comprising:
- a plurality of network nodes distributed in multiple geographical regions, wherein the plurality of network nodes are configured to collect mass scanning network traffic data;
- and
- at least one processor configured to:
- receive, from a first network node, a first network scanning request from a source scanner;
- in response to the reception of the first network scanning request, transmit, via a second network node, a second network scanning request to the source scanner;
- and
- determine, based on feedback from the source scanner, whether the source scanner is compromised.
A method for analyzing network traffic, comprising:
- receiving, from a first network node, a first network scanning request from a source scanner;
- in response to the reception of the first network scanning request, transmitting, via a second network node, a second network scanning request to the source scanner;
- and
- determining, based on feedback from the source scanner, whether the source scanner is compromised.
A non-transitory computer-readable medium storing instructions that, when executed by at least one processor, cause the at least one processor to perform a method for analyzing network traffic, the method comprising:
- receiving, from a first network node, a first network scanning request from a source scanner;
- in response to the reception of the first network scanning request, transmitting, via a second network node, a second network scanning request to the source scanner;
- and
- determining, based on feedback from the source scanner, whether the source scanner is compromised.
-92. (canceled)
Dependencies are inferred from the claim text.