IP Library Granted Patent US 10,831,526
Granted Patent B2
US 10,831,526 · App. 16/234,353 · Granted Nov 10, 2020

System and method of application discovery

Inventors: Arpit Malhotra (San Jose, CA); Nicholas York (San Ramon, CA); Susanta Pattanayak (San Jose, CA)
Assignee: Virtual Instruments Corporation
G06F9/45558G06F9/5077H04L41/0233H04L41/06H04L41/065H04L41/0681H04L41/0896H04L41/145H04L43/026H04L43/0876H04L43/12H04L43/16H04L47/2441H04L47/2483H04L67/1097G06F2009/4557G06F2009/45591G06F2009/45595H04L67/10
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,831,526
App. No.
16/234,353
Granted
Nov 10, 2020
Kind
B2
Abstract

A method comprises receiving network data from a network traffic monitoring platform of an enterprise network, the network data identifying communication between entities, analyzing the network data to identify applications, and comparing at least a first quality based on the communication between at least two of the plurality of entities to a first threshold to identify at least one application, receiving a request to suspend the application discovery process and creating a bookmark of the last network data received from the network traffic monitoring platform, the request to suspend the application discovery process being sent when one of a plurality of suspension trigger conditions is satisfied, receiving a request to reinitiate the application discovery process and receiving the network data from the network traffic monitoring platform at the bookmark, and creating a discovered application entry from the at least one identified application of the enterprise network.

Claims (55)

1. A method comprising:

receiving network data from a network traffic monitoring platform, the network traffic monitoring platform being in communication with the enterprise network, the network data identifying communication between entities of the enterprise network;

analyzing the network data to identify a plurality of applications of the enterprise network, the analysis of the network data including identifying from the network data the plurality of entities that communication with each other and comparing at least a first quality based on the communication between at least two of the plurality of entities to a first threshold to identify at least one application of the plurality of applications of the enterprise network;

receiving a request to suspend the application discovery process and creating a bookmark of the last network data received from the network traffic monitoring platform, the request to suspend the application discovery process being sent when one of a plurality of suspension trigger conditions is satisfied;

receiving a request to reinitiate the application discovery process and receiving the network data from the network traffic monitoring platform as indicated by the bookmark, the request to reinitiate the application discovery process when one of a plurality of reinitiation trigger condition is satisfied; and

creating a discovered application entry from the at least one identified application of the enterprise network.

2. The method of claim 1 further comprising:

receiving application data from a first application performance platform, the first application performance platform being in communication with the enterprise network.

3. The method of claim 1 further comprising:

receiving application data from a second application performance platform, the second application performance platform being in communication with the enterprise network.

4. The method of claim 3 further comprising:

discovered application entries from the first application performance platform is prioritized over the second application performance platform.

5. The method of claim 1 further comprising:

wherein the first quality being a duration that at least two entities of the enterprise network are in communication with each other and the first threshold being a communication duration threshold.

6. The method of claim 1 further comprising:

wherein the first quality being an amount of data traffic that at least two entities of the enterprise network are in communication with each other and the first threshold being a data traffic threshold.

7. The method of claim 1 , the application discovery process further comprising:

wherein the first quality being a creation time of entities of the enterprise network, the first threshold being entities introduction threshold.

8. The method of claim 2 , the application discovery process further comprising:

wherein the first application performance platform includes Netflow.

9. A system comprising:

one or more processors;

memory containing instructions to control the one or more processors to:

initiation of an application discovery process of an enterprise network, the application discovery process comprising:

receiving network data from a network traffic monitoring platform, the network traffic monitoring platform being in communication with the enterprise network, the network data identifying communication between entities of the enterprise network;

analyzing the network data to identify a plurality of applications of the enterprise network, the analysis of the network data including identifying from the network data the plurality of entities that communication with each other and comparing at least a first quality based on the communication between at least two of the plurality of entities to a first threshold to identify at least one application of the plurality of applications of the enterprise network;

receiving a request to suspend the application discovery process and creating a bookmark of the last network data received from the network traffic monitoring platform, the request to suspend the application discovery process being sent when one of a plurality of suspension trigger conditions is satisfied;

receiving a request to reinitiate the application discovery process and receiving the network data from the network traffic monitoring platform as indicated by the bookmark, the request to reinitiate the application discovery process when one of a plurality of reinitiation trigger condition is satisfied; and

creating a discovered application entry from the at least one identified application of the enterprise network.

10. The system of claim 9 , the application discovery process further comprising:

receiving application data from a first application performance platform, the first application performance platform being in communication with the enterprise network.

11. The system of claim 10 , the application discovery process further comprising:

receiving application data from a second application performance platform, the second application performance platform being in communication with the enterprise network.

12. The system of claim 11 , the application discovery process further comprising:

discovered application entries from the first application performance platform is prioritized over the second application performance platform.

13. The system of claim 9 , the application discovery process further comprising:

wherein the first quality being a duration that at least two entities of the enterprise network are in communication with each other and the first threshold being a communication duration threshold.

14. The system of claim 9 , the application discovery process further comprising:

wherein the first quality being an amount of data traffic that at least two entities of the enterprise network are in communication with each other and the first threshold being a data traffic threshold.

15. The system of claim 9 , the application discovery process further comprising:

wherein the first quality being a match between prefixes of names of the plurality of entities of the enterprise network and the first threshold being a name matching threshold.

16. The system of claim 9 , the application discovery process further comprising:

wherein the first quality being a time when entities are introduced into the enterprise network, the first threshold being entities introduction threshold.

17. The system of claim 9 , the application discovery process further comprising:

wherein the entities of the enterprise network includes storage devices or switches.

18. The system of claim 10 , the application discovery process further comprising:

wherein the first application performance platform includes Netflow.

19. The system of claim 18 , the application discovery process further comprising:

wherein the first application performance platform includes probes configured to monitor data traffic between entities of the enterprise network.

20. A computer program product comprising a computer readable storage medium having program code embodied therewith, the program code executable by a computing system to cause the computing system to perform:

receiving network data from a network traffic monitoring platform, the network traffic monitoring platform being in communication with the enterprise network, the network data identifying communication between entities of the enterprise network;

analyzing the network data to identify a plurality of applications of the enterprise network, the analysis of the network data including identifying from the network data the plurality of entities that communication with each other and comparing at least a first quality based on the communication between at least two of the plurality of entities to a first threshold to identify at least one application of the plurality of applications of the enterprise network;

receiving a request to suspend the application discovery process and creating a bookmark of the last network data received from the network traffic monitoring platform, the request to suspend the application discovery process being sent when one of a plurality of suspension trigger conditions is satisfied;

receiving a request to reinitiate the application discovery process and receiving the network data from the network traffic monitoring platform as indicated by the bookmark, the request to reinitiate the application discovery process when one of a plurality of reinitiation trigger condition is satisfied; and

creating a discovered application entry from the at least one identified application of the enterprise network.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 19, 2022
From: VIRTUAL INSTRUMENTS CORPORATION
To: VIRTUAL INSTRUMENTS WORLDWIDE, INC.
Reel/Frame 059964/0258 →
SECURITY INTEREST Recorded Jan 10, 2022
From: VIRTUAL INSTRUMENTS CORPORATION; VIRTUAL INSTRUMENTS WORLDWIDE, INC.; XANGATI, INC.
To: MIDTOWN MADISON MANAGEMENT LLC
Reel/Frame 058668/0268 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 16, 2020
From: MALHOTRA, ARPIT; YORK, NICHOLAS; PATTANAYAK, SUSANTA
To: VIRTUAL INSTRUMENTS CORPORATION
Reel/Frame 053231/0960 →
Continuity (2)
Provisional Application 62611892 · Dec 29, 2017
Related Publication 20190207837A1 · Jul 4, 2019