Network Topology Discovery via Segmented Bit Array Probing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The current lack of knowledge about the physical topology of large-scale networks, such as the Internet, hinders the identification of risks and the ability to mitigate potential cyber threats, as the identities and interconnectivity of routers within these networks are unknown.
Innovation Solution
A computer-enabled method is employed to obtain the routing topology of a network by creating a bit array of target IP addresses, assigning subsets to source devices, transmitting probing packets, and generating data structures to represent the routing topology, allowing for the identification of routers and visualization of network connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional methods are used to discover network topology, then the identification of routers and network connections is limited, but the ability to detect and mitigate cyber threats is significantly reduced
Solution Approach 1:
The patent segments the vast network address space into manageable subsets by assigning different bit array segments to different source devices. Each source device independently discovers topology information for its assigned segment, and the results are aggregated to form a complete network topology map. This segmentation enables scalable discovery of router identities and connections across the entire network while maintaining reliable threat detection capability.
2Loss of information
If comprehensive network topology discovery is performed across the entire network, then complete routing topology information is obtained, but the data collection and processing complexity increases significantly
Solution Approach 1:
The patent divides the network address space into segments assigned to different source devices using bit arrays. Each source device performs topology discovery only on its assigned segment, dramatically reducing the complexity for each individual device while collectively achieving complete network topology coverage through aggregation of all segment results.
Solution Approach 2:
The patent creates multiple copies of the bit array data structure, one for each source device, with each copy representing a segment of the network address space. This copying approach allows parallel processing of topology discovery across multiple devices while maintaining a unified representation of the complete network topology.
3Loss of information
If the entire network address space is scanned for topology discovery, then complete routing information is obtained, but the time and resources required for data collection increase substantially
Solution Approach 1:
The patent segments the network address space and assigns different segments to different source devices for parallel processing. This segmentation enables simultaneous topology discovery across multiple network segments, substantially improving data collection efficiency while obtaining complete routing topology information through aggregation of all segment results.
Solution Approach 2:
The patent performs preliminary assignment of network address segments to source devices using bit arrays before the actual topology discovery process. This preliminary action organizes the work distribution in advance, enabling efficient parallel execution of topology discovery across multiple devices and reducing overall data collection time.
Data Source
AI summary
The present disclosure relates to capturing the routing topology of a network (e.g., the Internet covering the entire IPv4 address space). An exemplary method comprises: obtaining a first bit array indicative of a plurality of target IP addresses; assigning a first subset of the plurality of target IP addresses to a first source device; assigning a second subset of the plurality of target IP addresses to a second source device; causing the first source device to transmit a first plurality of probing packets to the first subset of the plurality of target IP addresses and receive a first plurality of returned packets, causing the second source device to transmit a second plurality of probing packets to the second subset of the plurality of target IP addresses and receive a second plurality of returned packets, and generating a data structure representing a routing topology of the network.