Patents by Inventor Andrew Egan

Andrew Egan has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Method and apparatus for detecting port scans in a network
    Patent number: 10673877
    Abstract: A method and an apparatus for detecting a port scan in a network are disclosed. For example, the method extracts statistics from a message, detects the port scan for a source internet protocol address, determines whether a port scan record exists for the source internet protocol address, creates a port scan record for the source internet protocol address that is extracted when the port scan record does not exist, determines an elapsed time when the port scan record does exist, wherein the elapsed time is determined as a difference between the time stamp that is extracted and a recorded time stamp, sets the recorded time stamp to be the extracted time stamp when the elapsed time is less than an intra-scan time, and determines the port scan has ended for the source internet protocol address when the elapsed time is not less than the intra-scan time.
    Type: Grant
    Filed: July 8, 2019
    Date of Patent: June 2, 2020
    Assignee: AT&T Intellectual Property I, L.P.
    Inventors: Wai Sum Lai, Andrew Egan, Wen-Jui Li
  • METHOD AND APPARATUS FOR DETECTING PORT SCANS IN A NETWORK
    Publication number: 20190334937
    Abstract: A method and an apparatus for detecting a port scan in a network are disclosed. For example, the method extracts statistics from a message, detects the port scan for a source internet protocol address, determines whether a port scan record exists for the source internet protocol address, creates a port scan record for the source internet protocol address that is extracted when the port scan record does not exist, determines an elapsed time when the port scan record does exist, wherein the elapsed time is determined as a difference between the time stamp that is extracted and a recorded time stamp, sets the recorded time stamp to be the extracted time stamp when the elapsed time is less than an intra-scan time, and determines the port scan has ended for the source internet protocol address when the elapsed time is not less than the intra-scan time.
    Type: Application
    Filed: July 8, 2019
    Publication date: October 31, 2019
    Inventors: Wai Sum Lai, Andrew Egan, Wen-Jui Li
  • Method and apparatus for detecting port scans in a network
    Patent number: 10348749
    Abstract: A method and an apparatus for detecting a port scan in a network are disclosed. For example, the method extracts statistics from a message, detects the port scan for a source internet protocol address, determines whether a port scan record exists for the source internet protocol address, creates a port scan record for the source internet protocol address that is extracted when the port scan record does not exist, determines an elapsed time when the port scan record does exist, wherein the elapsed time is determined as a difference between the time stamp that is extracted and a recorded time stamp, sets the recorded time stamp to be the extracted time stamp when the elapsed time is less than an intra-scan time, and determines the port scan has ended for the source internet protocol address when the elapsed time is not less than the intra-scan time.
    Type: Grant
    Filed: April 16, 2018
    Date of Patent: July 9, 2019
    Assignee: AT&T Intellectual Property I, L.P.
    Inventors: Wai Sum Lai, Andrew Egan, Wen-Jui Li
  • METHOD AND APPARATUS FOR DETECTING PORT SCANS IN A NETWORK
    Publication number: 20180234441
    Abstract: A method and an apparatus for detecting a port scan in a network are disclosed. For example, the method extracts statistics from a message, detects the port scan for a source internet protocol address, determines whether a port scan record exists for the source internet protocol address, creates a port scan record for the source internet protocol address that is extracted when the port scan record does not exist, determines an elapsed time when the port scan record does exist, wherein the elapsed time is determined as a difference between the time stamp that is extracted and a recorded time stamp, sets the recorded time stamp to be the extracted time stamp when the elapsed time is less than an intra-scan time, and determines the port scan has ended for the source internet protocol address when the elapsed time is not less than the intra-scan time.
    Type: Application
    Filed: April 16, 2018
    Publication date: August 16, 2018
    Inventors: Wai Sum Lai, Andrew Egan, Wen-Jui Li
  • Method and apparatus for detecting port scans in a network
    Patent number: 9948661
    Abstract: A method and an apparatus for detecting a port scan in a network are disclosed. For example, the method extracts statistics from a message, detects the port scan for a source internet protocol address, determines whether a port scan record exists for the source internet protocol address, creates a port scan record for the source internet protocol address that is extracted when the port scan record does not exist, determines an elapsed time when the port scan record does exist, wherein the elapsed time is determined as a difference between the time stamp that is extracted and a recorded time stamp, sets the recorded time stamp to be the extracted time stamp when the elapsed time is less than an intra-scan time, and determines the port scan has ended for the source internet protocol address when the elapsed time is not less than the intra-scan time.
    Type: Grant
    Filed: October 29, 2014
    Date of Patent: April 17, 2018
    Assignee: AT&T INTELLECTUAL PROPERTY I, L.P.
    Inventors: Wai Sum Lai, Andrew Egan, Wen-Jui Li
  • METHOD AND APPARATUS FOR DETECTING PORT SCANS IN A NETWORK
    Publication number: 20160127390
    Abstract: A method and an apparatus for detecting a port scan in a network are disclosed. For example, the method extracts statistics from a message, detects the port scan for a source internet protocol address, determines whether a port scan record exists for the source internet protocol address, creates a port scan record for the source internet protocol address that is extracted when the port scan record does not exist, determines an elapsed time when the port scan record does exist, wherein the elapsed time is determined as a difference between the time stamp that is extracted and a recorded time stamp, sets the recorded time stamp to be the extracted time stamp when the elapsed time is less than an intra-scan time, and determines the port scan has ended for the source internet protocol address when the elapsed time is not less than the intra-scan time.
    Type: Application
    Filed: October 29, 2014
    Publication date: May 5, 2016
    Inventors: WAI SUM LAI, Andrew Egan, Wen-Jui Li