System and methods of determining and managing probes in a multi-hop network
The present application describes a method including one or more steps. One step of the method includes receiving, at a gateway including an encrypted pathway, traffic from a third party originating outside a multi-hop network intended for a client inside the network. Another step of the method includes determining, using a trained machine learning model, a probe of the received traffic attempting to obtain confidential information about the multi-hop network. Yet another step of the method includes flagging the third party based on determined probe.
1. A method comprising:
receiving, at a gateway including an encrypted pathway, traffic from a third party originating outside a multi-hop network intended for a client inside the multi-hop network;
determining, using a trained machine learning model, a probe of the received traffic attempting to obtain confidential information about the multi-hop network;
flagging the third party based on the determined probe; and
updating, based on the determined probe, a dynamic mode policy of an encrypted pathway supporting the client,
wherein the update includes moving an IP address, geography, and cloud provider of the encrypted pathway at an instance prior to a predetermined schedule of the dynamic mode policy, and
wherein the update occurs at every node of the encrypted pathway.
2. The method of claim 1 , further comprising:
obtaining training data from past traffic originating outside the multi-hop network transmitted to the network; and
training the machine learning model with the obtained training data.
3. The method of claim 1 , wherein the trained machine learning model evaluates an attribute of the received traffic selected from the group consisting of: type of protocol, source IP address, associated encrypted pathway, provider of the encrypted pathway, source geography, cadence and combinations thereof.
4. The method of claim 3 , wherein the machine learning model evaluates content of the received traffic.
5. The method of claim 1 , further comprising:
obtaining, via a user interface, a selection configured to cause display of a representation of one or more of the determined probe, third party and intended client.
6. The method of claim 5 , wherein the representation illustrates a pattern of probing another client in the multi-hop network.
7. The method of claim 1 , further comprising:
transmitting the flagged/determined probe to an administrator or a gateway at a remote destination.
8. A system comprising:
a non-transitory memory including a set of instructions; and
a processor operably coupled to the non-transitory memory configured to execute the set of instructions including:
receiving, at a gateway including an encrypted pathway, traffic from a third party originating outside a multi-hop network intended for a client inside the multi-hop network;
determining, via a trained machine learning model, a probe of the received traffic attempting to obtain information about the network; and
updating, based on the determined probe, a dynamic mode policy of an encrypted pathway supporting the client,
wherein the update includes moving an IP address, geography, and cloud provider of the encrypted pathway at an instance prior to a predetermined schedule of the dynamic mode policy, and
wherein the update occurs at every node of the encrypted pathway.
9. The system of claim 8 , wherein the processor is further configured to execute the instructions of
obtaining training data from past traffic originating outside the network transmitted to the network; and
training the machine learning model with the obtained training data.
10. The system of claim 8 , wherein the trained machine learning model evaluates an attribute of the received traffic selected from the group consisting of: type of protocol, source IP address, associated encrypted pathway, provider of the encrypted pathway, source geography, cadence, content and combinations thereof.
11. The system of claim 8 , wherein the processor is further configured to execute the instructions of:
obtaining, via a user interface, a selection configured to cause display of a representation of one or more of the determined probe, third party and intended client.
12. The system of claim 8 , wherein the processor is further configured to execute the instructions of:
transmitting the flagged/determined probe to an administrator or a gateway at a remote destination.
13. A computer readable storage medium comprising executable instructions which when executed by a processor effectuates:
receiving traffic originating outside a multi-hop network intended for a client inside the multi-hop network;
determining, using a trained machine learning model, a probe of the received traffic attempting to obtain information about the multi-hop network; and
flagging the determined probe; and
updating, based on the determined probe, a dynamic mode policy of an encrypted pathway supporting the client,
wherein the update includes moving an IP address, geography, and cloud provider of the encrypted pathway at an instance prior to a predetermined schedule of the dynamic mode policy, and
wherein the update occurs at every node of the encrypted pathway.
14. The computer readable storage medium of claim 13 , wherein the trained machine learning model evaluates a characteristic of the received traffic selected from the group consisting of: type of protocol, source IP address, associated encrypted pathway, provider of the encrypted pathway, source geography, cadence, content, and combinations thereof.
15. The computer readable storage medium of claim 13 , which when executed by the processor further effectuates:
obtaining, via a user interface, a selection configured to cause display of a representation of one or more of the determined probe, third party and intended client.
16. The computer readable storage medium of claim 15 , wherein the representation illustrates a pattern of probing another client in the multi-hop network.