System and method for IP target traffic analysis

摘要

Methods and systems for identifying network users who communicate with the network (e.g., the Internet) via a given network connection. The disclosed techniques analyze traffic that flows in the network to determine, for example, whether the given network connection serves a single individual or multiple individuals, a single computer or multiple computers. A Profiling System (PS) acquires copies of data traffic that flow through network connections that connect computers to the WAN. The PS analyzes the acquired data, attempting to identify individuals who login to servers.

主权项

1. A method, comprising:
acquiring, from a network, data traffic that is associated with a network connection; analyzing the data traffic so as to identify individual users by detecting one or more User Identifiers (UIs) that the individual uses for login to one or more servers over the network, thereby forming a UI cluster; associating the one or more UIs with the individual according to one or more association criteria; creating a list of one or more individuals who are served by the network connection by processing the acquired data traffic; and outputting the created list of the individuals.