Machine learning assisted network detection and response
OwnerDavid Geoffrey George, Neil Richard Terry +1inventors
InventorsDavid Geoffrey George, Neil Richard Terry, Christopher Adam Telfer
Life of this patent
Estimating the term…
Abstract
A method for responding to a threat includes receiving, by a firewall of a monitored network system, network traffic. The method includes inline preparing, by a packet analysis system located within the firewall, flow metadata associated with the network traffic, providing, by the packet analysis system, the network traffic to the firewall for further processing after the inline preparing, providing, by the firewall, the prepared flow metadata associated with the network traffic to a remote machine learning model for analysis, and receiving, by the firewall, a response from the machine learning model based on the analysis.
Claims20
A method for responding to a threat comprising:
- receiving, by a firewall of a monitored network system, network traffic;
- inline preparing, by a packet analysis system located within the firewall, flow metadata associated with the network traffic;
- providing, by the packet analysis system, the network traffic to the firewall for further processing after the inline preparing;
- providing, by the firewall, the prepared flow metadata associated with the network traffic to a remote machine learning model for analysis;
- and
- receiving, by the firewall, a response from the machine learning model based on the analysis.
A method for responding to a threat comprising:
- receiving, by a firewall of a monitored network system, network traffic;
- processing, by the firewall, the network traffic using a fast path processing system;
- accelerating, by the fast path processing system, the network traffic;
- preparing, by a packet analysis system located within the firewall, flow metadata associated with the network traffic;
- providing, by the firewall, the prepared flow metadata to a machine learning model for analysis;
- and
- receiving, by the firewall, a response from the machine learning model based on the analysis.
A firewalls system, comprising:
- one or more processors;
- one or more computer readable storage media;
- and
- computer readable code stored collectively in the one or more computer readable storage media, with the computer readable code including data and instructions to cause the one or more computer processors to perform a method for responding to a threat comprising:
- receiving, by a firewall of a monitored network system, network traffic;
- inline preparing, by a packet analysis system located within the firewall, flow metadata associated with the network traffic;
- providing, by the packet analysis system, the network traffic to the firewall for further processing after the inline preparing;
- providing, by the firewall, the prepared flow metadata associated with the network traffic to a remote machine learning model for analysis;
- and
- receiving, by the firewall, a response from the machine learning model based on the analysis.
Dependencies are inferred from the claim text.