DHCP Feature Classification for Illegitimate Device Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security solutions are inadequate in identifying and responding to unauthorized or illegitimate devices on service provider networks, which can cause network congestion and facilitate malicious activities, as they are slow, inaccurate, and unable to differentiate between legitimate and illegitimate devices effectively.
Innovation Solution
The implementation of methods that collect DHCP information to determine features, apply these features to a classification model, predict whether a device is illegitimate, and perform responsive actions such as blacklisting or quarantining, using machine learning techniques to rapidly and accurately identify and respond to illegitimate devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If machine learning classification models are applied to identify illegitimate devices, then identification accuracy is improved, but system complexity increases
Solution Approach 1:
The system collects DHCP information and determines device features in advance before applying them to the classification model. This preliminary action prepares the data structure and feature set needed for accurate classification, improving identification precision while managing complexity through structured preprocessing
Solution Approach 2:
The patent introduces DHCP information and feature determination as intermediary elements between raw device data and the classification model. These intermediaries transform complex raw data into structured features that the classification model can process efficiently, thereby improving accuracy without proportionally increasing overall system complexity
2Reliability
If responsive actions are performed prior to DHCP lease granting, then network resource protection is improved, but operational complexity increases
Solution Approach 1:
The system performs classification and predictive analysis before the DHCP server grants a lease to the device. By identifying illegitimate devices in advance and taking responsive actions (such as blocking or quarantining) before lease granting, the system protects network resources from being consumed by unauthorized devices, thereby improving reliability while managing operational complexity through automated early intervention
Data Source
AI summary
Systems, methods, and devices for identifying and responding to illegitimate devices on a service provider network include computing devices that are configured to collect dynamic host configuration protocol (DHCP) information related to a device (e.g., a modem, etc.) that establishes or requests to establish an internet protocol (IP) connection to the service provider network. The computing devices may determine features based on the collected DHCP information, apply the determined features to a classification model, and predict whether the device is an illegitimate device based on a result of applying the determined features to the classification model. The computing devices may perform a responsive action (e.g., blacklist or quarantine the device, etc.) in response to predicting that the device is an illegitimate device.