Method for remediating an undesired traffic pattern detected based on network subgraphs, method of processing network flow queries, computer readable non-transitory storage medium, and computer system

• Main Author: VANDERKWAAK, JOEL E
• Format: Patent
• Language: Chinese; English
• Published: 01.09.2019
• Subjects: CALCULATING; COMPUTING; COUNTING; DATA PROCESSING SYSTEMS OR METHODS, SPECIALLY ADAPTED FORADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL, SUPERVISORYOR FORECASTING PURPOSES; ELECTRIC DIGITAL DATA PROCESSING; PHYSICS; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE,COMMERCIAL, FINANCIAL, MANAGERIAL, SUPERVISORY OR FORECASTINGPURPOSES, NOT OTHERWISE PROVIDED FOR

Communications between servers of a network are received and processed to generate network subgraphs. The network subgraph may be used for implementing administrative domain wide policies, for presenting information on a user interface, or for other purposes. A unit network subgraph is generated for each server. The unit network subgraph represents communications of the server with other servers. A network subgraph is generated by aggregating information of unit network subgraphs servers included in the network subgraph. The network subgraph may be used to evaluate an expression specified by an administrative domain wide policy. The result of evaluation of the expression may be used to determine whether actions specified by the policy are executed. The network subgraph may be used for processing network flow queries, for example, for displaying network information on a user interface.