Back to results
US 8,019,764 B1Granted
System and method for internet endpoint profiling
AssigneeNarus, Inc.
InventorsAntonio Nucci, Supranamaya Ranjan, Aleksandar Kuzmanovic
Life of this patent
Estimating the term…
Abstract
The present invention relates to a method of profiling an Internet endpoint associated with an Internet Protocol (IP) address, the method includes generating a profiling rule using an Internet search engine, obtaining a search result by inputting the IP address to the Internet search engine, and classifying the Internet endpoint based on the search result using the profiling rule.
Claims11
A method of profiling an Internet endpoint associated with an Internet Protocol (IP) address, comprising:
- generating a profiling rule using an Internet search engine;
- obtaining a search result by inputting the IP address as a search phrase to the Internet search engine;
- and
- classifying the Internet endpoint based on the search result using the profiling rule,
- wherein the profiling rule comprises a IP tag and a key phrase list having a phrase associated with a URL class, the URL class being associated with the IP tag,
- wherein the profiling rule further comprises a data structure having an entry, the entry having a first domain name associated with the phrase,
- wherein the data structure is a hash table having a plurality of indexes corresponding to a plurality of values, the plurality of indexes comprising the first domain name, the plurality of values comprising the phrase,
- wherein the search result comprises:
- a Uniform Resource Locator (URL) having a second domain name;
- and
- a hit text associated with the URL, the hit text comprising a phrase in the key phrase list,
- wherein classifying the Internet endpoint comprises assigning the URL class to the URL and assigning the IP tag to the Internet end point if the first domain name is the same as the second domain name,
- wherein generating the profiling rule comprises:
- adding an index comprising the second domain name to the hash table if the plurality of indexes do not comprise the second domain name;
- setting a counter to an initial count;
- obtaining another search result by inputting another IP address to the Internet search engine, the another search result comprising another hit text associated with another URL;
- the another hit text comprising another phrase in the key phrase list;
- incrementing the counter if the another URL comprises the second domain name;
- and
- setting a value in the hash table corresponding to the index based on at least one selected from the group consisting of the phrase and the another phrase if the counter exceeds a pre-determined threshold.
17 more elements
A computer readable medium, embodying instructions executable by the computer to perform method steps for profiling an Internet endpoint associated with an Internet Protocol (IP) address, the instructions comprising functionality for:
- generating a profiling rule using an Internet search engine;
- obtaining a search result by inputting the IP address as a search phrase to the Internet search engine;
- and
- classifying the Internet endpoint based on the search result using the profiling rule,
- wherein the profiling rule comprises a IP tag and a key phrase list having a phrase associated with a URL class, the URL class being associated with the IP tag,
- wherein the profiling rule further comprises a data structure having an entry, the entry having a first domain name associated with the phrase,
- wherein the data structure is a hash table having a plurality of indexes corresponding to a plurality of values, the plurality of indexes comprising the first domain name, the plurality of values comprising the phrase,
- wherein the search result comprises:
- a Uniform Resource Locator (URL) having a second domain name;
- and
- a hit text associated with the URL, the hit text comprising a phrase in the key phrase list,
- wherein classifying the Internet endpoint comprises assign the URL class to the URL and assigning the IP tag to the Internet end point if the first domain name is the same as the second domain name,
- wherein generating the profiling rule comprises:
- adding an index comprising the second domain name to the hash table if the plurality of indexes do not comprise the second domain name;
- setting a counter to an initial count;
- obtaining another search result by inputting another IP address to the Internet search engine, the another search result comprising another hit text associated with another URL;
- the another hit text comprising another phrase in the key phrase list;
- incrementing the counter if the another URL comprises the second domain name;
- and
- setting a value in the hash table corresponding to the index based on at least one selected from the group consisting of the phrase and the another phrase if the counter exceeds a pre-determined threshold.
17 more elements
Dependencies are inferred from the claim text.