System and method for monitoring network traffic
AssigneeAT&T Intellectual Property II, L.P.
InventorsEdward Amoroso, Albert Greenberg, Balachander Krishnamurthy
Life of this patent
Estimating the term…
Abstract
Described is a method of assigning a network address to a trap, the network address being a dark address of a virtual private network. The network traffic destined for the network address is monitored and a classification of the network traffic is determined. After the classification, a predetermined response is executed based on the classification of the traffic.
Claims20
A method, comprising:
- by a network server, monitoring network traffic received within a target virtual private network comprising a plurality of network addresses including a dark network address assigned to a trap;
- by the network server, gathering data regarding the network traffic including determining a level of the network traffic destined for the dark network address;
- and
- by the network server, comparing the level of traffic to a predetermined threshold level to determine whether the network traffic is unauthorized.
A system, comprising:
- a server coupled to a computer network, the server comprising a processor and non-transitory computer readable media containing instructions that, when executed by the processor, causes the processor to:
- monitor network traffic received within a target virtual private network comprising a plurality of network addresses of the computer network including a network address assigned to a trap in a reserved address space of the computer network;
- gather data regarding the network traffic including a level of the network traffic destined for the network address assigned to the trap;
- and
- compare the level of traffic to a predetermined threshold level to determine whether the network traffic is unauthorized.
A non-transitory computer-readable storage medium storing a set of instructions, the set of instructions capable of being executed by a processor, the set of instructions performing the steps of:
- monitoring network traffic received within a target virtual private network comprising a plurality of network addresses including a dark network address assigned to a trap network;
- gathering data regarding the network traffic including determining a level of the network traffic destined for the dark network address;
- and
- comparing the level of traffic to a predetermined threshold level to determine whether the network traffic is unauthorized.
Dependencies are inferred from the claim text.