Patent ID: 8433790
Filing Date: 2013-04-30
Classification: G06F,H04L

Abstract:
1. A computer system, comprising: a processor and memory configured to detect a physical topology of a network comprising hosts and sensors in the network; determine different divisions of hosts within a same one of network blocks of the network: for each of the sensors, determine distances between the sensor and each of the hosts in the different divisions of hosts within the same one of network blocks of the network, and for each of the different divisions of hosts, assign a sensor-network block score to indicate physical proximity based on the distances between the sensor and each of the hosts in the each of the different divisions of hosts; determine which one of the sensors to assign to one of the different divisions of hosts within the same network block of the hosts, based on which one of the sensors is physically closest the one of the different divisions of hosts within the same network block as indicated by the sensor-network block scores; and generate a sensor policy that assigns the one of the sensors to monitor the one of the different divisions of hosts within the same network block of the hosts, based on the sensor-network block scores, wherein the processor is further configured to iteratively divide and determine sensor-network block scores of smaller divisions of hosts within the network block; and scale the sensor-network block scores that are assigned to prefer a larger network block over a smaller network block, when the different divisions of hosts within the network block are iteratively divided into smaller divisions of hosts within the network block.