Abstract: Methods and apparatus for detecting and correlating content consumption, e.g., viewing of programs and/or accessing websites, across platforms of different types are described. Content consumption, e.g., requests and/or streaming is monitored and recorded on a per subscriber basis for a wide variety of platforms, e.g., set boxes, IP content playback devices such as cell phones or pad devices with IP streaming support, and/or other devices. Web site access and corresponding content consumption is determined based on DNS requests thereby avoiding the need for monitoring at web site servers and allowing centralized monitoring of web site access operations in the form of DNS requests to be detected by a Web service provider who, at least in some embodiments, is also a content provider.

Abstract: Methods and apparatus for evaluating collected data relating to online activity, and modification of services within a service provider network. In one embodiment, a service provider collects data relating to the online activity of users of third-party services and correlates the data with subscribers of the service provider to generate useful products and analytics (e.g., classifications, behavioral models, etc.) containing information relating to the subscribers' online activity. The generated products may be used to determine whether and how to modify services provided to individual subscribers, exported for use by third parties, or for other purposes.

Abstract: Methods and apparatus for evaluating collected data relating to online activity, and modification of services within a service provider network. In one embodiment, a service provider collects data relating to the online activity of users of third-party services and correlates the data with subscribers of the service provider to generate useful products and analytics (e.g., classifications, behavioral models, etc.) containing information relating to the subscribers' online activity. The generated products may be used to determine whether and how to modify services provided to individual subscribers, exported for use by third parties, or for other purposes.

Abstract: Methods and apparatus for evaluating collected data relating to online activity, and modification of services within a service provider network. In one embodiment, a service provider collects data relating to the online activity of users of third-party services and correlates the data with subscribers of the service provider to generate useful products and analytics (e.g., classifications, behavioral models, etc.) containing information relating to the subscribers' online activity. The generated products may be used to determine whether and how to modify services provided to individual subscribers, exported for use by third parties, or for other purposes.

Abstract: Methods and apparatus for detecting and correlating content consumption, e.g., viewing of programs and/or accessing websites, across platforms of different types are described. Content consumption, e.g., requests and/or streaming is monitored and recorded on a per subscriber basis for a wide variety of platforms, e.g., set boxes, IP content playback devices such as cell phones or pad devices with IP streaming support, and/or other devices. Web site access and corresponding content consumption is determined based on DNS requests thereby avoiding the need for monitoring at web site servers and allowing centralized monitoring of web site access operations in the form of DNS requests to be detected by a Web service provider who, at least in some embodiments, is also a content provider.

Abstract: Methods and apparatus for detecting and correlating content consumption, e.g., viewing of programs and/or accessing websites, across platforms of different types are described. Content consumption, e.g., requests and/or streaming is monitored and recorded on a per subscriber basis for a wide variety of platforms, e.g., set boxes, IP content playback devices such as cell phones or pad devices with IP streaming support, and/or other devices. Web site access and corresponding content consumption is determined based on DNS requests thereby avoiding the need for monitoring at web site servers and allowing centralized monitoring of web site access operations in the form of DNS requests to be detected by a Web service provider who, at least in some embodiments, is also a content provider.

Abstract: Methods and apparatus for evaluating collected data relating to online activity, and modification of services within a service provider network. In one embodiment, a service provider collects data relating to the online activity of users of third-party services and correlates the data with subscribers of the service provider to generate useful products and analytics (e.g., classifications, behavioral models, etc.) containing information relating to the subscribers' online activity. The generated products may be used to determine whether and how to modify services provided to individual subscribers, exported for use by third parties, or for other purposes.

Abstract: Methods and apparatus for evaluating collected data relating to online activity, and modification of services within a service provider network. In one embodiment, a service provider collects data relating to the online activity of users of third-party services and correlates the data with subscribers of the service provider to generate useful products and analytics (e.g., classifications, behavioral models, etc.) containing information relating to the subscribers' online activity. The generated products may be used to determine whether and how to modify services provided to individual subscribers, exported for use by third parties, or for other purposes.

Abstract: Traffic is obtained from a plurality of internet protocol version six addresses within a plurality of internet protocol version six blocks; and a first indication of inappropriate traffic is obtained from a first one of the addresses. Responsive to the first indication of inappropriate traffic, a reputation score for a first given one of the blocks, containing the first one of addresses, is incremented by a first predetermined amount; and a reputation score for a second given one of the blocks, adjacent the first given one of the blocks, is incremented by a second predetermined amount which is less than the first predetermined amount. Traffic from the plurality of addresses within the plurality of blocks is passed or blocked in accordance with a policy based on the incremented reputation scores for the first and second given ones of the blocks.

Abstract: Methods and apparatus for evaluating collected data relating to online activity, and modification of services within a service provider network. In one embodiment, a service provider collects data relating to the online activity of users of third-party services and correlates the data with subscribers of the service provider to generate useful products and analytics (e.g., classifications, behavioral models, etc.) containing information relating to the subscribers' online activity. The generated products may be used to determine whether and how to modify services provided to individual subscribers, exported for use by third parties, or for other purposes.

Abstract: Methods and apparatus for detecting and correlating content consumption, e.g., viewing of programs and/or accessing websites, across platforms of different types are described. Content consumption, e.g., requests and/or streaming is monitored and recorded on a per subscriber basis for a wide variety of platforms, e.g., set boxes, IP content playback devices such as cell phones or pad devices with IP streaming support, and/or other devices. Web site access and corresponding content consumption is determined based on DNS requests thereby avoiding the need for monitoring at web site servers and allowing centralized monitoring of web site access operations in the form of DNS requests to be detected by a Web service provider who, at least in some embodiments, is also a content provider.

Abstract: Traffic is obtained from a plurality of internet protocol version six addresses within a plurality of internet protocol version six blocks; and a first indication of inappropriate traffic is obtained from a first one of the addresses. Responsive to the first indication of inappropriate traffic, a reputation score for a first given one of the blocks, containing the first one of addresses, is incremented by a first predetermined amount; and a reputation score for a second given one of the blocks, adjacent the first given one of the blocks, is incremented by a second predetermined amount which is less than the first predetermined amount. Traffic from the plurality of addresses within the plurality of blocks is passed or blocked in accordance with a policy based on the incremented reputation scores for the first and second given ones of the blocks.

Abstract: Traffic is obtained from a plurality of internet protocol version six addresses within a plurality of internet protocol version six blocks; and a first indication of inappropriate traffic is obtained from a first one of the addresses. Responsive thereto, a reputation score for a first given one of the blocks, containing the first one of the internet protocol version six addresses, is incremented by a first predetermined amount; and a reputation score for an adjacent block is incremented by a second predetermined amount which is less than the first predetermined amount. Traffic from the plurality of internet protocol version six addresses within the plurality of internet protocol version six blocks is passed or blocked in accordance with a policy based on the incremented reputation scores for the first block and adjacent block. Techniques for internet protocol version four (individual and network address translation aspects) are also provided.

Abstract: Traffic is obtained from a plurality of internet protocol version six addresses within a plurality of internet protocol version six blocks; and a first indication of inappropriate traffic is obtained from a first one of the addresses. Responsive thereto, a reputation score for a first given one of the blocks, containing the first one of the internet protocol version six addresses, is incremented by a first predetermined amount; and a reputation score for an adjacent block is incremented by a second predetermined amount which is less than the first predetermined amount. Traffic from the plurality of internet protocol version six addresses within the plurality of internet protocol version six blocks is passed or blocked in accordance with a policy based on the incremented reputation scores for the first block and adjacent block. Techniques for internet protocol version four (individual and network address translation aspects) are also provided.