US 2020/0396235 A1Published application

Automated Estimation of Network Security Policy Risk

AssigneeZscaler, Inc.

InventorsJohn O 'Neil, Michael J. Melson

Life of this patent

Estimating the term…

Loading patent…

Abstract

A computer system automatically tests a network communication model by predicting whether particular traffic (whether actual or simulated) should be allowed on the network, and then estimating the accuracy of the network communication model based on the prediction. Such an estimate may be generated even before the model has been applied to traffic on the network. For example, the model may be generated based on a first set of network traffic. The accuracy of the model may then be estimated based on a second set of network traffic. This allows the accuracy of the model to be estimated without first waiting to apply the model to actual network traffic, thereby reducing the risk associated with applying the model before its accuracy is known.

Claims20

Dependent claims

A method performed by at least one computer processor executing computer program instructions stored in at least one non-transitory computer-readable medium, the method comprising:

(A) for each of a plurality of observed communications over a network between applications executing on a plurality of computer systems, collecting and storing observed communications data representing the plurality of observed communications;
(B) generating a network communication model based on the observed communications data;
(C) generating, based on the observed communications data, hypothetical communications data representing a plurality of hypothetical communications that is distinct from the plurality of observed communications;
and
(D) identifying allowed data representing a plurality of allowed network communications, including at least some of the plurality of observed communications and at least some of the plurality of hypothetical communications, that are allowed by the network communication model;
(E) identifying positive data representing a plurality of network communications that should be allowed by the network communication model;
and
(F) calculating an accuracy of the network communication model based on the allowed data and the positive data.

5 more elements

A system comprising at least one non-transitory computer-readable medium storing computer program instructions executable by at least one computer processor to perform a method, the method comprising:

(A) for each of a plurality of observed communications over a network between applications executing on a plurality of computer systems, collecting and storing observed communications data representing the plurality of observed communications;
(B) generating a network communication model based on the observed communications data;
(C) generating, based on the observed communications data, hypothetical communications data representing a plurality of hypothetical communications that is distinct from the plurality of observed communications;
and
(D) identifying allowed data representing a plurality of allowed network communications, including at least some of the plurality of observed communications and at least some of the plurality of hypothetical communications, that are allowed by the network communication model;
(E) identifying positive data representing a plurality of network communications that should be allowed by the network communication model;
and
(F) calculating an accuracy of the network communication model based on the allowed data and the positive data.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/898,760Filed 11 Jun 2020
Priority: 11 Jun 2019
Published: 17 Dec 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

H04L 63/1425
By monitoring network traffic: traffic logging, e.g. anomaly detection
H04L 41/142
Network analysis or design: using statistical or mathematical methods
H04L 41/145
Network analysis or design: involving simulating, designing, planning or modelling of a network
H04L 41/149
Network analysis or design: for prediction of maintenance

Family

Application62/860,094Us provisional application · filed 11 Jun 2019
US 11,509,673 B2Related patent
US 2020/0396235 A1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key