Network Traffic Manager Risk Scoring Before Server Forwarding
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network traffic management systems fail to detect and differentiate between legitimate and malicious network traffic, leading to potential data leaks and inefficient resource allocation, as they do not implement security controls before forwarding requests to servers.
Innovation Solution
Implementing a network traffic management apparatus with an evaluating unit to assess security risks, determine a risk metric, and adjust data access rights for transactions, directing them to appropriate servers based on these evaluations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network traffic management systems forward all requests to servers without security control, then network throughput and processing speed are maintained, but security risks increase and data leaks may occur
Solution Approach 1:
The patent implements preliminary security control by evaluating transactions and determining risk metrics before forwarding requests to servers. The network traffic management apparatus assesses security risks in advance and determines data access rights prior to traffic forwarding, preventing malicious traffic from reaching servers while maintaining legitimate traffic flow.
Solution Approach 2:
The patent introduces a network traffic management apparatus as an intermediary component between clients and servers. This apparatus performs security evaluations, risk metric determinations, and data access right assignments before forwarding traffic, acting as a mediator that protects servers from malicious requests without blocking legitimate transactions.
2Productivity
If all network traffic is treated equally without risk assessment, then system operation is simple and fast, but resource allocation becomes inefficient and malicious traffic consumes server resources
Solution Approach 1:
The patent applies local quality by treating different network traffic differently based on their risk characteristics. Instead of uniform treatment, the system evaluates each transaction individually, determines risk metrics, and assigns appropriate data access rights. High-risk traffic receives restricted access or is blocked, while low-risk traffic maintains full access, optimizing resource allocation based on actual risk levels.
Solution Approach 2:
The system performs preliminary evaluation of transactions to determine risk metrics before resource allocation. By assessing security risks in advance and determining data access rights prior to traffic forwarding, the system prevents malicious traffic from consuming server resources while ensuring legitimate traffic receives appropriate resource allocation.
3Reliability
If security control is implemented at the network traffic management apparatus, then malicious traffic is detected and blocked before reaching servers, but processing time for security evaluation increases
Solution Approach 1:
The patent implements partial security control by evaluating transactions based on their risk characteristics. Instead of applying uniform security controls to all traffic, the system determines risk metrics and applies appropriate data access rights selectively. This partial action approach maintains security protection while minimizing processing time for low-risk transactions that can be handled more quickly.
Data Source
AI summary
Methods, non-transitory computer readable media, network traffic manager apparatuses, and systems that facilitate network security are disclosed. The method includes evaluating a security risk of a transaction and determining a risk metric for the transaction based on the evaluation. Based on the risk metric, the method further includes determining a data access right for the transaction. Then the method includes directing the transaction to a target application entity based on the data access right of the transaction.