Dynamic filter generation and distribution within computer networks
AssigneeLevel 3 Communications, LLC
InventorMichael Benjamin
Life of this patent
Estimating the term…
Abstract
Systems and methods for implementing filters within computer networks include obtaining blocklist data that includes blocklist entries for a network. Each of the blocklist entries includes one or more network traffic attributes for identifying traffic to be blocked. In response to receiving the blocklist data, a filter based on a common network traffic attribute shared between at least two of the plurality of blocklist entries is generated. The filter is then deployed to a network device within the network such that the filter may be implemented at the network device to block corresponding traffic.
Claims18
A method of implementing filters within a network, the method comprising:
- generating a filter from blocklist data, the blocklist data containing a plurality of blocklist entries, each blocklist entry having network traffic attributes, wherein generating the filter comprises:
- grouping the plurality of blocklist entries into one or more sets according to the network traffic attributes, wherein each of the one or more sets includes blocklist entries having at least one common network traffic attribute;
- and
- for a set of blocklist entries of the one or more sets to be filtered, generating a filter rule for identifying network traffic having the at least one common network traffic attribute of the set to be filtered;
- and
- deploying the filter to a network device by implementing the filter rule at the network device.
A non-transient computer-readable storage medium having instructions embodied thereon, the instructions being executable by one or more processors to perform a method for implementing filters within a network, the method comprising:
- generating a filter from blocklist data, the blocklist data containing a plurality of blocklist entries, each blocklist entry having network traffic attributes, wherein generating the filter comprises:
- grouping the plurality of blocklist entries into one or more sets according to the network traffic attributes, wherein each of the one or more sets includes blocklist entries sharing at least one common network traffic attribute;
- and
- for a set of blocklist entries of the one or more sets to be filtered, generating a filter rule for identifying network traffic having the at least one common network traffic attribute of the set to be filtered;
- and
- deploying the filter to a network device by implementing the filter rule at the network device.
A system configured for implementing filters within computer networks, the system comprising:
- one or more hardware processors;
- and
- a memory storing machine-readable instructions that, when executed by the one or more hardware processors, cause the one or more hardware processors to:
- obtain blocklist data including a plurality of blocklist entries for a network, each of the plurality of blocklist entries including one or more network traffic attributes;
- generate a filter based on a common network traffic attribute shared between at least two of the plurality of blocklist entries;
- and
- deploy the filter to a network device within the network.
Dependencies are inferred from the claim text.