Back to results
US 8,554,948 B2Granted
Methods, systems and computer program products for identifying traffic on the internet using communities of interest
AssigneeAT&T Intellectual Property I, L.P.
InventorsJacobus Van Der Merwe, Minaxi Gupta, Andrew Kalafut
Life of this patent
Estimating the term…
Abstract
Methods for identifying wanted traffic on the Internet are provided. The methods include determining a traffic history for a user of the Internet; identifying wanted traffic in a stream of Internet traffic based on the determined traffic history; and prioritizing the identified wanted traffic such that unwanted traffic is assigned a lower priority than the wanted traffic. Related systems and computer program products are also provided.
Claims14
A method for identifying wanted traffic on the internet, comprising:
- determining a traffic history for a user of the internet;
- identifying wanted traffic in a stream of internet traffic based on the traffic history;
- prioritizing the wanted traffic such that unwanted traffic is assigned a lower priority than the wanted traffic, and
- defining a heuristic, wherein identifying and prioritizing are performed based on the heuristic and wherein the heuristic comprises:
- a low port number heuristic that defines traffic in the stream of internet traffic as wanted traffic if any port numbers involved in a connection are below 1024;
- a low packet count heuristic that defines traffic in the stream of internet traffic as wanted traffic if five or fewer packets are seen in a flow;
- and
- a reverse flow seen heuristic that defines traffic in the stream of internet traffic as wanted traffic if a flow has been seen between a same pair of IP addresses in an opposite direction within a previous seven day period,
- wherein determining, identifying, prioritizing and defining are performed by at least one processor.
6 more elements
A data processing system for identifying wanted traffic on the internet, comprising:
- a processor, the processor comprising:
- a history module to determine a traffic history for a user of the internet;
- an identification module to identify wanted traffic in a stream of internet traffic based on the traffic history;
- and
- a prioritization module to prioritize the identified traffic such that unwanted traffic is assigned a lower priority than the wanted traffic, wherein the history module further defines a heuristic, wherein the heuristic comprises:
- a low port number heuristic that defines traffic in the stream of internet traffic as wanted traffic if any port numbers involved in a connection are below 1024;
- a low packet count heuristic that defines traffic in the stream of internet traffic as wanted traffic if five or fewer packets are seen in a flow;
- and
- a reverse flow seen heuristic that defines traffic in the stream of internet traffic as wanted traffic if a flow has been seen between a same pair of IP addresses in an opposite direction within a previous seven day period, wherein the identification module identifies and the prioritization module prioritizes based on the heuristic.
6 more elements
A computer program product for identifying wanted traffic on the internet, comprising:
- a non-transitory computer readable storage medium having computer readable program code embodied therein, the computer readable program code comprising:
- computer readable program code to determine a traffic history for a user of the internet;
- computer readable program code to identify wanted traffic in a stream of internet traffic based on the traffic history;
- computer readable program code to prioritize the wanted traffic such that unwanted traffic is assigned a lower priority than the wanted traffic;
- and
- computer readable program code to define a heuristic, wherein the computer program code to identify and the computer program code to prioritize are performed based on the heuristic and wherein the heuristic comprises:
- a low port number heuristic that defines traffic in the stream of internet traffic as wanted traffic if any port numbers involved in a connection are below 1024;
- a low packet count heuristic that defines traffic in the stream of internet traffic as wanted traffic if five or fewer packets are seen in a flow;
- and
- a reverse flow seen heuristic that defines traffic in the stream of internet traffic as wanted traffic if a flow has been seen between a same pair of IP addresses in an opposite direction within a previous seven day period.
7 more elements
Dependencies are inferred from the claim text.