IP Library Granted Patent US 11,729,069
Granted Patent B2
US 11,729,069 · App. 17/090,847 · Granted Aug 15, 2023

Visualizing communication networks using social networking algorithms

Inventors: Ravid Circus (Kfar Saba, IL); Yaron Chen (Hod Hasharon, IL); Ron Davidson (Herzliya, IL)
Assignee: SKYBOX SECURITY, INC.
H04L41/22H04L41/0893H04L41/12
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,729,069
App. No.
17/090,847
Granted
Aug 15, 2023
Kind
B2
Abstract

A method that may include receiving network information indicative of (a) network elements that comprise edge network element, (b) connectivity between the network elements, and (c) connectivity of edge network elements to one or more other networks; and generating a visual representation of the network, the visual representation comprises multiple layers, each layer comprises one or more of the network elements of the network, wherein different layers are associated with different importance values; wherein the visual representation is associated with selection metadata for selecting which part out of multiple parts of the visual representation to display, wherein each part comprises at least a part of a single layer the multiple layers.

Claims (24)

1. A method for providing a visual representation of a network, the method comprises:

receiving network information indicative of (a) network nodes that comprise edge network nodes, (b) connectivity between the network nodes; and (c) connectivity of edge network nodes to one or more other networks;

generating the visual representation of the network, the visual representation comprises multiple layers, each layer comprises one or more of the network nodes of the network, wherein different layers are associated with different importance values; wherein the visual representation is associated with selection metadata for selecting which part out of multiple parts of the visual representation to display, wherein each part comprises at least a part of a single layer of the multiple layers;

performing one or more clustering iterations, each clustering iteration comprises clustering network nodes based on topological similarities between one or more hosts of network nodes, the outcome of the one or more clustering iteration is a network that comprises processed network nodes;

calculating, for each one of a pair of hosts, an identity parameter for the pair of hosts, wherein the identity parameter for the pair of hosts equals Nident*Coefficient/(Nmin−Nignore); and

calculating of the identity parameter for a pair of hosts is based on (a) a number of identical connections (Nident) of the pair of hosts, (b) a number of connections (Nmin) of a host that has a lowest number of connections out of all nodes of the network, (c) a number (Nignore) of ignored networks coupled to the network; wherein each ignored network has a physical connection that is different from a logical connection of the network.

2. The method according to claim 1 wherein the network nodes comprise multiple hosts, wherein the multiple hosts are ordered to the multiple layers according to importance values of the multiple hosts; wherein the method comprises determining an importance value of a host of the multiple hosts based on a number of shortest path that pass through the host.

3. The method according to claim 1 wherein each clustering iteration comprises merging edge network nodes connected to a same network node.

4. The method according to claim 1 comprising allocating the processed network nodes to the multiple layers.

5. The method according to claim 4 wherein the allocating is based, at least in part, on an importance of the processed network nodes.

6. The method according to claim 5 comprising calculating the importance of the processed network nodes by calculating Betweenness Centrality of the processed network nodes.

7. The method according to claim 5 comprising calculating the importance of the processed network nodes at least in part based on structural metadata that defines roles of network nodes of the processed network nodes.

8. The method according to claim 1 wherein the generating of the visual representation comprises adding to a visual representation of a layer of the network, inter-layer connectivity indications indicative of a path that connects two network nodes of the layer, wherein the path passes through at least one other layer of the network.

9. The method according to claim 1 comprising displaying the visual representation of the network.

10. The method according to claim 1 comprising transmitting to a recipient computerized device the visual representation of the network.

11. A non-transitory computer readable medium that stores instructions for:

receiving network information indicative of (a) network nodes that comprise edge network nodes, (b) connectivity between the network nodes, and (c) connectivity of edge network nodes to one or more other networks;

generating a visual representation of the network, the visual representation comprises multiple layers, each layer comprises one or more of the network nodes of the network, wherein different layers are associated with different importance values; wherein the visual representation is associated with selection metadata for selecting which part out of multiple parts of the visual representation to display, wherein each part comprises at least a part of a single layer of the multiple layers;

performing one or more clustering iterations, each clustering iteration comprises clustering network nodes based on topological similarities between one or more hosts of network nodes, the outcome of the one or more clustering iteration is a network that comprises processed network nodes;

calculating, for each one of a pair of hosts, an identity parameter for the pair of hosts, wherein the identity parameter for the pair of hosts equals Nident*Coefficient/(Nmin-Nignore); and

calculating of the identity parameter for a pair of hosts is based on (a) a number of identical connections (Nident) of the pair of hosts, (b) a number of connections (Nmin) of a host that has a lowest number of connections out of all nodes of the network, and (c) a number (Nignore) of ignored networks coupled to the network; wherein each ignored network has a physical connection that is different from a logical connection of the network.

12. The non-transitory computer readable medium according to claim 11 wherein the network nodes comprise multiple hosts, wherein the multiple hosts are ordered to the multiple layers according to importance values of the multiple hosts; wherein the method comprises determining an importance value of a host of the multiple hosts based on a number of shortest path that pass through the host.

13. The non-transitory computer readable medium according to claim 11 wherein the generating of the visual representation of the network comprises adding to a visual representation of a layer of the multiple layers, inter-layer connectivity indications indicative of a path that connects two network nodes of the layer, wherein the path passes through at least one other layer of the multiple layers.

14. The non-transitory computer readable medium according to claim 11 wherein each ignored network is selected out of a multiprotocol label switching C(MIPLS) network or a virtual private network CVPN} network.

Assignments (6)
PATENT SECURITY AGREEMENT Recorded May 30, 2025
From: SPEAR PARENT, INC.
To: TCG SENIOR FUNDING, L.L.C., AS COLLATERAL AGENT
Reel/Frame 071464/0732 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 16, 2025
From: SKYBOX SECURITY, INC.
To: SPEAR PARENT, INC.
Reel/Frame 071138/0372 →
RELEASE OF SECURITY INTEREST Recorded Feb 25, 2025
From: JPMORGAN CHASE BANK, N.A.
To: SKYBOX SECURITY, INC.
Reel/Frame 070326/0871 →
CORRECTIVE ASSIGNMENT TO CORRECT THE CORRECT THE PROPERTY LIST BY DELETING PATENT APPLICATION NO. 10/409,993 AND ADDING PATENT NO. 10,409,993 PREVIOUSLY RECORDED AT REEL: 61994 FRAME: 530. ASSIGNOR(S) HEREBY CONFIRMS THE SECURITY INTEREST. Recorded Feb 25, 2025
From: SKYBOX SECURITY, INC.
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 070328/0572 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 31, 2023
From: CIRCUS, RAVID; CHEN, YARON; DAVIDSON, RON
To: SKYBOX SECURITY, INC.
Reel/Frame 063231/0529 →
SECURITY INTEREST Recorded Dec 6, 2022
From: SKYBOX SECURITY, INC.
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 061994/0530 →