Patent ID: 9712374
Date: 2017-07-18
CPC Classifications: H04L

Claim:
1. A method comprising: intercepting, with a network security device that applies a security service to a plurality of sessions, inbound packets that include application-layer data for the plurality of sessions; processing, with the network security device and for each session of the plurality of sessions, the inbound packets for the session to determine an expected receipt time for remaining application-layer data to be received by the network security device for a current transaction for the session; determining a weight for each session of the plurality of sessions, wherein the weight for each session of the plurality of sessions is correlative to the expected receipt time for the session; calculating, with the network security device, an average weight for the plurality of sessions based on the weight for each of the plurality of sessions; selecting a first session from the plurality of sessions based on a determination that the first session has a weight that is less than or equal to the average weight for the plurality of sessions; allocating additional memory resources of the network security device to store additional application-layer data received in additional inbound packets for the selected first session; and preventing allocation of additional memory resources to unselected sessions in the plurality of sessions until the first session terminates.