US 11,716,266 B2
Network security monitoring and correlation system and method of using same
Jason Ingalls, Woodworth, LA (US); Adam Richards, Bossier City, LA (US); Eugenio Perinelli, Verona (IT); Nicola Piccinelli, Montichiari (IT); and Riccardo Arena, Verona (IT)
Assigned to Ingalls Information Security IP, LLC, Woodworth, LA (US)
Filed by INGALLS INFORMATION SECURITY IP, L.L.C., Alexandria, LA (US)
Filed on Mar. 9, 2021, as Appl. No. 17/196,569.
Application 17/196,569 is a continuation of application No. 15/750,074, granted, now 10,965,561, previously published as PCT/US2016/045399, filed on Aug. 3, 2016.
Claims priority of provisional application 62/200,510, filed on Aug. 3, 2015.
Prior Publication US 2021/0218649 A1, Jul. 15, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 43/045 (2022.01); H04L 41/22 (2022.01); H04L 41/12 (2022.01); H04L 43/06 (2022.01); H04L 43/12 (2022.01); H04L 9/40 (2022.01)
CPC H04L 43/045 (2013.01) [H04L 41/12 (2013.01); H04L 41/22 (2013.01); H04L 43/06 (2013.01); H04L 43/12 (2013.01); H04L 63/1425 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A network visualization system, comprising:
an application server comprising a non-transitory computer readable medium having stored thereon software instructions for programming the application server to perform server operations including:
retrieving network traffic metadata and discrete data pertaining to a monitored network, wherein the monitored network comprises a private network, a public network, and an external network, with the private network, the public network, and the external network each comprising a plurality of computer hosts;
processing the network traffic metadata by normalizing the network traffic metadata and constructing a graph data structure, the graph data structure comprising: one or more vertices representing the plurality of computer hosts existing on each of the private network, the public network, and the external network; and one or more edges representing connections between two computer hosts; and
processing the discrete data by adding the discrete data to the one or more edges in the graph data structure.