Apparatus and method for linguistic scoring
View Patent ↗In embodiments of the invention, a system receives selections from a user based on a list of pre-defined monitoring categories and/or optionally receives custom category definitions from the user. The option for custom category definitions may be advantageous due to the flexibility provided to a system administrator or other user. In embodiments of the invention, the pre-defined and/or custom monitoring categories may be or include complex hierarchical behavior. Such an approach provides monitoring algorithms that can achieve improved accuracy compared to known methods. In embodiments of the invention, the order of computations used in resolving a monitoring category may be re-ordered, statically and/or dynamically, to improve the efficiency of monitoring operations.
1. A method for linguistic analysis of local area network (LAN) data sources and wide area network (WAN) communications communicated on the LAN which is coupled to the WAN, said method comprising:
establishing on a server communicatively coupled to the LAN a hierarchical plurality of pre-requisite triggers;
initializing an Avoid Evaluation Of This Trigger (AEOTT) rating for one of the plurality of pre-requisite triggers;
resolving the one of a plurality of pre-requisite triggers for a first of a plurality of data sets associated with one of the data sources or with a WAN communication communicated on said LAN;
determining whether resolving the pre-requisite trigger caused an early exit;
if resolving the pre-requisite trigger caused an early exit, modifying the AEOTT rating by decreasing the AEOTT rating;
if resolving the pre-requisite trigger did not cause an early exit, modifying the AEOTT rating by increasing the AEOTT rating;
resolving the plurality of pre-requisite triggers for subsequent ones of the plurality of data sets in an order based on the modified AEOTT rating; and
based on said resolving steps, performing a predetermined action selected from the group consisting of blocking LAN access to or from a URL associated with the WAN communication and communicated on the LAN, alerting an administrator about the WAN communication communicated on the LAN or about the one of the data sources, and logging data about the WAN communication communicated on the LAN or about the one of the data sources.