Methods, systems, and devices for software defined network monitoring
AssigneeAT&T Intellectual Property I, L. P.
InventorsMehdi Malboubi, Baofeng Jiang
Life of this patent
Estimating the term…
Abstract
Aspects of the subject disclosure may include, for example, determining a group of coefficients for a digital filter, and configuring the digital filter according to the group of coefficients. Further embodiments can include processing a group of statistics associated with a first data flow utilizing the digital filter, and determining a first statistic from the group of statistics does not satisfy a statistical threshold resulting in a first determination. Other embodiments are disclosed.
Claims20
A device, comprising:
- a processing system including a processor;
- and
- a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, comprising:
- determining a group of coefficients for a digital filter;
- configuring the digital filter according to the group of coefficients;
- processing a group of data flows from across a communication network utilizing the digital filter to generate a group of statistics associated with the data flows;
- determining a first statistic from the group of statistics does not satisfy a statistical threshold resulting in a first determination;
- identifying a security risk within the communication network based on the first determination;
- and
- providing a group of instructions for a group of network devices, wherein the group of instructions indicate to mitigate the security risk.
A non-transitory, machine-readable medium, comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations, the operations comprising:
- determining a group of coefficients for a digital filter;
- configuring the digital filter according to the group of coefficients;
- processing a group of data flows from across a communication network utilizing the digital filter to generate a group of statistics associated with the data flows;
- determining a first statistic from the group of statistics does not satisfy a statistical threshold resulting in a first determination;
- identifying a denial of service (DOS) attack within the communication network based on the first determination;
- and
- providing a group of instructions for a group of network devices, wherein the group of instructions indicate to mitigate the DOS attack.
A method, comprising:
- determining, by a processing system including a processor, a group of coefficients for each of a group of digital filters;
- configuring, by the processing system, each digital filter of the group of digital filters according to the group of coefficients;
- processing, by the processing system, a group of data flows from across a communication network utilizing the group of digital filters to generate a group of statistics associated with the data flows;
- determining, by the processing system, a first statistic from the group of statistics does not satisfy a statistical threshold resulting in a first determination;
- identifying, by the processing system, a security risk within the communication network based on the first determination;
- and
- providing, by the processing system, a group of instructions for a group of network devices, wherein the group of instructions indicate to mitigate the security risk.
Dependencies are inferred from the claim text.