SG11201506938PA - System and method for extracting and preserving metadata for analyzing network communications - Google Patents

System and method for extracting and preserving metadata for analyzing network communications

Info

Publication number
SG11201506938PA
SG11201506938PA SG11201506938PA SG11201506938PA SG11201506938PA SG 11201506938P A SG11201506938P A SG 11201506938PA SG 11201506938P A SG11201506938P A SG 11201506938PA SG 11201506938P A SG11201506938P A SG 11201506938PA SG 11201506938P A SG11201506938P A SG 11201506938PA
Authority
SG
Singapore
Prior art keywords
extracting
network communications
analyzing network
preserving metadata
metadata
Prior art date
Application number
SG11201506938PA
Other languages
English (en)
Inventor
Gene Savchuk
Anubhav Arora
Original Assignee
Fidelis Cybersecurity Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Fidelis Cybersecurity Inc filed Critical Fidelis Cybersecurity Inc
Publication of SG11201506938PA publication Critical patent/SG11201506938PA/en

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425Traffic logging, e.g. anomaly detection
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/02Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227Filtering policies
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/02Capturing of monitoring data
    • H04L43/026Capturing of monitoring data using flow identification
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/12Network monitoring probes
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416Event detection, e.g. attack signature detection
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1433Vulnerability analysis
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/18Protocol analysers

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
SG11201506938PA 2013-03-14 2014-03-14 System and method for extracting and preserving metadata for analyzing network communications SG11201506938PA (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US201361784931P 2013-03-14 2013-03-14
PCT/US2014/029426 WO2014153176A1 (en) 2013-03-14 2014-03-14 System and method for extracting and preserving metadata for analyzing network communications

Publications (1)

Publication Number Publication Date
SG11201506938PA true SG11201506938PA (en) 2015-09-29

Family

ID=51581439

Family Applications (1)

Application Number Title Priority Date Filing Date
SG11201506938PA SG11201506938PA (en) 2013-03-14 2014-03-14 System and method for extracting and preserving metadata for analyzing network communications

Country Status (12)

Country Link
US (1) US9961095B2 (de)
EP (1) EP2974144B1 (de)
JP (1) JP2016513944A (de)
KR (1) KR20160019397A (de)
CN (1) CN105103496A (de)
AU (1) AU2014236179A1 (de)
CA (1) CA2903262A1 (de)
HK (1) HK1219006A1 (de)
IL (1) IL241457B (de)
MX (1) MX2015010770A (de)
SG (1) SG11201506938PA (de)
WO (1) WO2014153176A1 (de)

Families Citing this family (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10334085B2 (en) * 2015-01-29 2019-06-25 Splunk Inc. Facilitating custom content extraction from network packets
US10425447B2 (en) * 2015-08-28 2019-09-24 International Business Machines Corporation Incident response bus for data security incidents
FI127335B (en) * 2016-05-27 2018-04-13 Cysec Ice Wall Oy Logging of telecommunications on a computer network
CN108632224B (zh) * 2017-03-23 2022-03-15 中兴通讯股份有限公司 一种apt攻击检测方法和装置
DE102017208735A1 (de) 2017-05-23 2018-11-29 Siemens Aktiengesellschaft Verfahren und Vorrichtung zum Schutz einer Kommunikation zwischen mindestens einer ersten Kommunikationseinrichtung und wenigstens einer zweiten Kommunikationseinrichtung insbesondere innerhalb eines Kommunikationsnetzwerkes einer industriellen Fertigung und/oder Automatisierung
US10630642B2 (en) 2017-10-06 2020-04-21 Stealthpath, Inc. Methods for internet communication security
US10375019B2 (en) 2017-10-06 2019-08-06 Stealthpath, Inc. Methods for internet communication security
US10361859B2 (en) 2017-10-06 2019-07-23 Stealthpath, Inc. Methods for internet communication security
US10367811B2 (en) 2017-10-06 2019-07-30 Stealthpath, Inc. Methods for internet communication security
US10397186B2 (en) 2017-10-06 2019-08-27 Stealthpath, Inc. Methods for internet communication security
US10374803B2 (en) 2017-10-06 2019-08-06 Stealthpath, Inc. Methods for internet communication security
KR101996044B1 (ko) * 2017-11-27 2019-07-03 (주) 시스메이트 암호화 트래픽의 네트워크 포렌식 서비스 제공을 위한 icap 프로토콜 확장 방법과 이를 지원하는 네트워크 포렌식 장치 및 웹 프락시
EP3869370B1 (de) * 2018-10-17 2022-11-30 Panasonic Intellectual Property Corporation of America Bedrohungsanalysegerät, bedrohungsanalyseverfahren und programm
CN108965349A (zh) * 2018-10-19 2018-12-07 周红梅 一种监测高级持续性网络攻击的方法和系统
KR102080478B1 (ko) * 2019-06-20 2020-02-24 주식회사 쿼드마이너 패턴 기반 색인 처리 시스템 및 이를 이용한 패턴 기반 색인 처리 방법
KR102080477B1 (ko) * 2019-06-20 2020-02-24 주식회사 쿼드마이너 고성능 패킷 스트림 저장 시스템 및 이를 이용한 고성능 패킷 스트림 저장 방법
WO2020256210A1 (ko) * 2019-06-20 2020-12-24 주식회사 쿼드마이너 네트워크 포렌식 시스템 및 이를 이용한 네트워크 포렌식 방법
KR102080479B1 (ko) * 2019-06-20 2020-02-24 주식회사 쿼드마이너 시나리오 중심 실시간 공격 감지 시스템 및 이를 이용한 시나리오 중심 실시간 공격 감지 방법
US11558423B2 (en) 2019-09-27 2023-01-17 Stealthpath, Inc. Methods for zero trust security with high quality of service
KR102484886B1 (ko) * 2021-06-11 2023-01-06 주식회사 시큐다임 정보 유출 모니터링 서버 및 방법

Family Cites Families (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7315891B2 (en) 2000-01-12 2008-01-01 Vericept Corporation Employee internet management device
US20110214157A1 (en) * 2000-09-25 2011-09-01 Yevgeny Korsunsky Securing a network with data flow processing
US9525696B2 (en) * 2000-09-25 2016-12-20 Blue Coat Systems, Inc. Systems and methods for processing data flows
US7783765B2 (en) 2001-12-12 2010-08-24 Hildebrand Hal S System and method for providing distributed access control to secured documents
US7260555B2 (en) 2001-12-12 2007-08-21 Guardian Data Storage, Llc Method and architecture for providing pervasive security to digital assets
JP2003242267A (ja) 2002-02-15 2003-08-29 Fujitsu Ltd プロフィール情報公開方法及びプロフィール情報公開プログラム
AU2003276869A1 (en) 2002-09-09 2004-03-29 Netrake Corporation System for allowing network traffic through firewalls
US7454499B2 (en) 2002-11-07 2008-11-18 Tippingpoint Technologies, Inc. Active network defense system and method
JPWO2005006191A1 (ja) 2003-07-10 2006-08-24 富士通株式会社 複数種類の情報を登録する装置および方法
US7463590B2 (en) * 2003-07-25 2008-12-09 Reflex Security, Inc. System and method for threat detection and response
US7515717B2 (en) 2003-07-31 2009-04-07 International Business Machines Corporation Security containers for document components
US7467202B2 (en) * 2003-09-10 2008-12-16 Fidelis Security Systems High-performance network content analysis platform
US8112800B1 (en) 2007-11-08 2012-02-07 Juniper Networks, Inc. Multi-layered application classification and decoding
US20090290492A1 (en) * 2008-05-23 2009-11-26 Matthew Scott Wood Method and apparatus to index network traffic meta-data
US8838819B2 (en) * 2009-04-17 2014-09-16 Empirix Inc. Method for embedding meta-commands in normal network packets
CN101599963B (zh) * 2009-06-10 2012-07-04 电子科技大学 网络疑似威胁信息筛选器及筛选处理方法
WO2013055807A1 (en) * 2011-10-10 2013-04-18 Global Dataguard, Inc Detecting emergent behavior in communications networks
CN102594625B (zh) * 2012-03-07 2016-04-20 北京启明星辰信息技术股份有限公司 一种apt智能检测分析平台中的白数据过滤方法及系统
US9628507B2 (en) * 2013-09-30 2017-04-18 Fireeye, Inc. Advanced persistent threat (APT) detection center

Also Published As

Publication number Publication date
US9961095B2 (en) 2018-05-01
CA2903262A1 (en) 2014-09-25
WO2014153176A1 (en) 2014-09-25
EP2974144B1 (de) 2018-09-05
IL241457B (en) 2018-11-29
AU2014236179A1 (en) 2015-09-03
EP2974144A4 (de) 2016-09-14
MX2015010770A (es) 2016-06-17
US20150264072A1 (en) 2015-09-17
JP2016513944A (ja) 2016-05-16
IL241457A0 (en) 2015-11-30
HK1219006A1 (zh) 2017-03-17
EP2974144A1 (de) 2016-01-20
CN105103496A (zh) 2015-11-25
KR20160019397A (ko) 2016-02-19

Similar Documents

Publication Publication Date Title
HK1219006A1 (zh) 用於提取和保存元數據以便分析網絡通信的系統和方法
GB201316957D0 (en) Operation management system and operation management method
EP2947950A4 (de) Netzwerkzugangssystem und -verfahren
EP2879442A4 (de) Verfahren und vorrichtung für netzwerksuche
EP2876945A4 (de) Datenverarbeitungsverfahren, modem und endgerät
EP2933965A4 (de) Verfahren, vorrichtung und system zum zugreifen auf ein netzwerk
EP3024178A4 (de) Verfahren und vorrichtung zur vorhersage der netzwerkleistung
IL243436A0 (en) A system of telephone network and method
EP2854028A4 (de) Verwaltungsverfahren, -vorrichtung und -system für assoziierte plugins
EP3057348A4 (de) Verwaltungsverfahren und vorrichtung für gemeinsame netzwerknutzung
EP3001733A4 (de) Verfahren, vorrichtung und system zur netzwerkauswahl
EP2991440A4 (de) Verfahren, vorrichtung und system zur verbindung mit einem netzwerk
EP3030019A4 (de) Identifizierungsverfahren, vorrichtung, netzwerkvorrichtung und netzwerksystem
EP3021609A4 (de) Netzwerktestverfahren und datensammelverfahren dafür sowie netzwerktestvorrichtung und -system
GB2519634B (en) System, apparatus and method for well deliquification
EP3048837A4 (de) Verfahren und vorrichtung zur verarbeitung eines netzwerkzugangs
EP3068091A4 (de) Netzwerkkonfigurationsverfahren, zugehörige vorrichtung und system
EP2941060A4 (de) Netzwerkzugriffsverfahren, -vorrichtung und -system
GB201301659D0 (en) Network method and apparatus
ZA201500407B (en) Spectrum management system and method
EP2942900A4 (de) Verfahren, vorrichtung und system zur verbesserung der netzwerksicherheit
HK1221546A1 (zh) 數字真實安防系統、方法和程序
EP3040877A4 (de) Verfahren und system zur verarbeitung assoziierter inhalte
GB2513426B (en) Method and apparatus for network communication
EP3037984A4 (de) Verfahren und vorrichtung zur gewinnung von netzwerkressourcen