TH132998A - A method for inferring the connection diagram between devices in a computer network of interest by analyzing the correlation of data traffic. - Google Patents

Abstract

DC60 (26/06/55) How to infer connections between computer network devices of interest and identify numbers. Connected interfaces By analyzing the relationships of incoming and outgoing data for each device to determine which devices are connected. Connected at any interface number, this method can find the connection closest to the physical connection, but when the devices of interest are in different areas and not directly connected. How can this find Logical connection is possible without limitation that all devices must be from the same manufacturer, all devices do not need to be within the same Local Area Network. Only one network device is monitored, the data used for analysis is standard information on common network devices. No installation required Additional software and it is information that the administrator already has. The benefits are Make sure the connection Between the network devices of interest and the number of interfaces used to connect And make it known when There is a change in the connection within the network (Topology Change Detection), such as in the event of Disconnect the cable to change the interface. The network monitoring system may not detect anomaly due to The connection was lost for a moment. And the terminal equipment can still be contacted But this proposed method can validate network changes in this form. How to infer the connection between the computer network devices of interest and identify the number. Connected interfaces By analyzing the relationships of the data volume in and out of each Devices to know which devices are connected to each other at any interface number.This method can find the closest connection to the physical connection. However, if the device of interest is in different areas and is not connected directly, this method can find Strategic connection (logicalconnection) without limitation that all devices must be from the same manufacturer, all devices do not need to be within the local area network. (LocalAreaNetwork) Additionally, checks are performed with only one network monitoring device. The data used for analysis are standard information on common network devices, not required to be installed. Additional software and it is information that the system administrator already has. Make sure the connection Between devices converting connections within a network (TopologyChangeDetection) such as in the case of Disconnect the cable to change the interface. The network monitoring system may not detect anomaly due to The connection was lost for a moment. And the terminal equipment can still be contacted But this proposed method can validate network changes in this form.

Claims (1)

1. How to infer the connection diagram between devices in a computer network of interest that It consists of steps of (formula) preparing a traffic data set that includes the inbound and outbound traffic of all interfaces on all devices in the computer network of interest over a period of time (formula t) (formula). Calculate the correlation coefficient of the data obtained from the previous step. (Formula) Sorting the correlation coefficient from the previous step. (Recipe) Device pairing and tagging: