System and method for detecting rogue traffic using flow statistics with a list of authorized engines

摘要

Disclosed herein are systems, methods, and non-transitory computer-readable storage media for determining rogue traffic using flow statistics and a list of authorized media engines. A system configured according to this disclosure receives data associated with a group of packets in a media queue, such as the source network address where the packets originated, the destination network address for the packets, and an indication of an associated queue for the packets. The system then verifies the data received by comparing the source network address to a list of network addresses of known media engines. The system further verifies that the indication of an associated queue for the packets is correct for the packets. Should the system detect failure in the verification of known media engines or the verification of indication of associated queues, the system generates a notification.

主权项

1. A method comprising:
receiving data associated with a plurality of packets in a media queue, the data comprising a source network address, a destination network address, and an indication of an associated queue for the plurality of packets; and based on the data, determining, via a processor, whether at least one of the source network address is a prohibited network address and the indication of the associated queue is correct for the plurality of packets.