Abstract: In one embodiment, a technique is provided for propagating network address to attribute associations between network addresses. One or more profiles are obtained that maintain an association between a first network address and one or more attributes, the association produced from network address observations of the first network address by one or more source devices in communication with a network. A second network address is determined that is associated with the first network address based on a similarity criteria. The second network address initially lacks an association with the one or more attributes. The one or more attributes are propagated from the first network address to the second address, to form an association between the second network address and the one or more attributes. The association between the second network address and the one or more attributes is then stored in an updated profile.

Abstract: In one embodiment, a processing technique is provided that utilizes multiple network address observations. One or more records are obtained that maintain network address observations, each network address observation associating one or more attributes with a network address observed by one or more source devices. Multiple network addresses from the network address observations are clustered into one or more discrete groups of network addresses based on a clustering criteria. For a selected group of network addresses, an association is formed associating one or more refined attributes derived from the selected group with an individual network address that is a member of the selected group.

Abstract: In one embodiment, a processing technique is provided for determining a refined attribute of a network address based on one or more other attributes. A network address associated with a source device in communication with a network is observed. One or more first attributes of the network address are determined, where the one or more first attributes indicate at least a spatial or temporal property of the network address. The one or more first attributes are processed to determine a second attribute to be associated with the network address, where the second attribute indicates whether the network address is a fixed or mobile network address, or is a proxy or non-proxy network address. A record is stored that maintains the association between the second attribute and the network address.

Abstract: In one embodiment, a mapping/translation technique is provided for generating an association between an observed network address and one or more attributes that are not directly observed. A network address is observed that is associated with a source device. A first attribute is determined, the first attribute being a directly observed attribute. The first attribute is mapped to a second attribute based on at least a predefined spatial, temporal, or identity-related correspondence between the first attribute and the second attribute, wherein the second attribute was not directly observed in connection with the network address. An association is generated between the second attribute and the network address. A record that maintains the association between the second attribute and the network address is stored.

Abstract: In one embodiment, a filtering technique is provided for ensuring data quality of network address observations. A network address observation is obtained of a network address associated with a source device, the network address observation associating the network address with one or more directly observed attributes. The network address observation is filtered based on a comparison of a selected one of the one or more directly observed attributes to a predetermined criteria, and using a result of the comparison as indicative of whether the network address observation should be used for association of the network address with one or more directly observed attributes. The filtering either associates one or more indicators with the network address observation, or removes the network address observation. A network address to attribute association system executed on one or more electronic devices stores a record that maintains any network address observation that has not been removed and any indicator.

Abstract: In one embodiment, a processing technique is provided that utilizes multiple network address observations. One or more records are obtained that maintain network address observations, each network address observation associating one or more attributes with a network address observed by one or more source devices. Multiple network addresses from the network address observations are clustered into one or more discrete groups of network addresses based on a clustering criteria. For a selected group of network addresses, an association is formed associating one or more refined attributes derived from the selected group with an individual network address that is a member of the selected group.

Abstract: In one embodiment, a filtering technique is provided for ensuring data quality of network address observations. A network address observation is obtained of a network address associated with a source device, the network address observation associating the network address with one or more directly observed attributes. The network address observation is filtered based on a comparison of a selected one of the one or more directly observed attributes to a predetermined criteria, and using a result of the comparison as indicative of whether the network address observation should be used for association of the network address with one or more directly observed attributes. The filtering either associates one or more indicators with the network address observation, or removes the network address observation. A network address to attribute association system executed on one or more electronic devices stores a record that maintains any network address observation that has not been removed and any indicator.

Abstract: In one embodiment, a technique is provided for propagating network address to attribute associations between network addresses. One or more profiles are obtained that maintain an association between a first network address and one or more attributes, the association produced from network address observations of the first network address by one or more source devices in communication with a network. A second network address is determined that is associated with the first network address based on a similarity criteria. The second network address initially lacks an association with the one or more attributes. The one or more attributes are propagated from the first network address to the second address, to form an association between the second network address and the one or more attributes. The association between the second network address and the one or more attributes is then stored in an updated profile.

Abstract: In one embodiment, a mapping/translation technique is provided for generating an association between an observed network address and one or more attributes that are not directly observed. A network address is observed that is associated with a source device. A first attribute is determined, the first attribute being a directly observed attribute. The first attribute is mapped to a second attribute based on at least a predefined spatial, temporal, or identity-related correspondence between the first attribute and the second attribute, wherein the second attribute was not directly observed in connection with the network address. An association is generated between the second attribute and the network address. A record that maintains the association between the second attribute and the network address is stored.

Abstract: In one embodiment, a processing technique is provided for determining a refined attribute of a network address based on one or more other attributes. A network address associated with a source device in communication with a network is observed. One or more first attributes of the network address are determined, where the one or more first attributes indicate at least a spatial or temporal property of the network address. The one or more first attributes are processed to determine a second attribute to be associated with the network address, where the second attribute indicates whether the network address is a fixed or mobile network address, or is a proxy or non-proxy network address. A record is stored that maintains the association between the second attribute and the network address.