System and method for dynamically identifying internal hosts in a heterogeneous computing environment with multiple subnetworks

摘要

A system and method for dynamically identifying internal hosts in a heterogeneous computing environment with multiple subnetworks is disclosed. A plurality of packets are analyzed. Each such packet includes a source address of an originating host and a destination address of a receiving host. An unknown originating host located at the source address of an outbound packet is classified as an inside host with high confidence. An unknown receiving host located at the destination address of an inbound packet is classified as an inside host. The unknown receiving host is reclassified as an inside host with high confidence upon receiving a further outbound packet having a source address corresponding to the address of the unknown receiving host.