US 12,261,818 B2
System and method of discovering a network asset from a network sample
Aviv Yehezkel, Ramat-Gan (IL); and Eyal Elyashiv, Ramat Hasharon (IL)
Assigned to TWEENZNET LTD., Tel Aviv-Jaffa (IL)
Filed by TWEENZNET LTD., Tel Aviv-Jaffa (IL)
Filed on Jul. 4, 2023, as Appl. No. 18/346,803.
Claims priority of provisional application 63/358,552, filed on Jul. 6, 2022.
Prior Publication US 2024/0015134 A1, Jan. 11, 2024
Int. Cl. H04L 61/4541 (2022.01); H04L 61/4511 (2022.01)
CPC H04L 61/4541 (2022.05) [H04L 61/4511 (2022.05)] 18 Claims
OG exemplary drawing
 
1. A method of discovering computer network assets, the method comprising:
identifying, by a processor, in sampled traffic over at least one computer network, an internet protocol (IP) address of a node communicating over at least one port, wherein the at least one port is associated with an asset type;
determining, by the processor, a volume of traffic associated with the IP address of the node communicating over the at least one port;
discovering, by the processor, the IP address of the node as belonging to an asset of the asset type, based on the volume of traffic exceeding a dynamic threshold and based on volume of internal communication over the at least one port associated with the asset type that exceeds a port threshold; and
adding the asset, by the processor, to a list of discovered assets,
wherein the dynamic threshold is determined, by the processor, based on a ratio between the port threshold and a number of nodes with internal IP addresses communicating over the at least one port.