Dynamic Verbosity Adjustment for Network Supervision Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Complex information systems face challenges in managing large volumes of supervision data, leading to difficulties in processing and storage, resource availability, and potential network saturation, while traditional verbosity level management compromises security and detection of targeted attacks.
Innovation Solution
A dynamic method for managing verbosity levels in data networks, where the control center detects stimuli and adjusts verbosity levels based on predefined scenarios and performance data, allowing for adaptive logging to reduce data overload while maintaining security and performance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If monitoring levels are reduced to decrease log volume, then network performance is improved, but security monitoring capability deteriorates
Solution Approach 1:
The patent implements dynamic verbosity level adjustment where monitoring levels are not fixed but adapt automatically based on detected stimuli. The control center modifies verbosity levels in real-time according to network conditions, security threats, and component states, allowing the system to maintain high security monitoring when needed while optimizing network performance during normal operations
Solution Approach 2:
The system changes the parameter of verbosity level dynamically based on various conditions. Different verbosity levels (first, second, third levels) are applied to different components or time periods based on detected stimuli, allowing flexible adjustment of monitoring intensity without compromising overall security while reducing unnecessary log volume
2Reliability
If verbosity levels are increased to improve security monitoring, then attack detection capability is improved, but network saturation risk increases
Solution Approach 1:
The patent applies different verbosity levels to different network components based on their specific security requirements and risk profiles. Critical components receive higher monitoring intensity while less critical components use lower verbosity levels, allowing the system to focus security resources where needed most without generating excessive logs from all components uniformly
Solution Approach 2:
The system applies excessive monitoring (higher verbosity levels) only partially to specific components or time periods when threats are detected, rather than maintaining high verbosity levels across the entire network continuously. This selective approach ensures adequate security monitoring capability while avoiding unnecessary log volume that would cause network saturation
3Device complexity
If common monitoring rules are applied to multiple components, then system complexity is reduced, but security vulnerability increases
Solution Approach 1:
The patent assigns specific verbosity levels and monitoring rules to individual components based on their security characteristics, criticality, and behavior patterns. Each component can have customized monitoring parameters while the control center manages these assignments systematically, balancing rule complexity with targeted security monitoring
Solution Approach 2:
The system segments the network into multiple components with different verbosity level assignments. The control center manages these segmented components individually, allowing customized monitoring rules for each segment while maintaining overall system coherence through centralized control
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for dynamic management of at least one first level of verbosity (NCp(1) of at least one component (Cp) defined in a data network, said data network having a control centre (SUPERV), each component ((Cp)i€[1;M]) allowing the execution of a set of tasks and comprising a security management configuration associating a status message, referred to as a log, with the execution of a task (Tpk) of said component, each log (LOGpk) associated with a task indicating at least one event and having a local level (NLk), the control centre (SUPERV) allowing the collection of a set of logs in order to supervise said network, said method comprising: a detection of a stimulus by a control centre (SUPERV); a determination of at least one component (Cp) associated with the stimulus detected by the control centre (SUPERV); a modification of the first level of verbosity of said component (NCp(1)) to a second level of verbosity (NCp(2)) during a first given period (T1), said modification being launched by the generation of a supervision command (MODIF(Nc)) by the control centre (SUPERV), the second level of verbosity (NCp(2)) being defined according to the stimulus.