Method and apparatus for remote application monitoring
AssigneeThe Johns Hopkins University
InventorLanier A. Watkins
Life of this patent
Estimating the term…
Abstract
A method executable via operation of configured processing circuitry to identify applications by remote monitoring may include initiating remote communication with a target device through an access point, the access point providing network access to the target device, providing a series of ping messages to the target device via the access point to determine a delay signature of an application running on the target device, and generating application identification information based on the delay signature.
Claims20
An apparatus comprising processing circuitry configured to execute instructions for:
- initiating remote communication with a target device through an access point of a communication network, the access point providing network access to the target device;
- providing a series of ping messages to the target device via the access point;
- determining a delay signature of the target device based on Internet Control Message Protocol (ICMP) replies to the ping messages;
- and
- determining which learned application of a plurality of learned applications is running on the target device based on a comparison of the delay signature with a plurality of learned application delay signatures, wherein each learned application delay signature is associated with a respective learned application, and each learned application delay signature is defined based on training performed using training ICMP replies from a training device that is running the respective learned application.
A method executable via operation of configured processing circuitry, the method comprising:
- initiating remote communication with a target device through an access point of a communication network, the access point providing network access to the target device;
- providing a series of ping messages to the target device via the access point;
- determining a delay signature of the target device based on Internet Control Message Protocol (ICMP) replies to the ping messages;
- and
- determining which learned application of a plurality of learned applications is running on the target device based on a comparison of the delay signature with a plurality of learned application delay signatures, wherein each learned application delay signature is associated with a respective learned application, and each learned application delay signature is defined based on training performed using training ICMP replies from a training device that is running the respective learned application.
Dependencies are inferred from the claim text.