Systems and methods are provided for combining a multiple sub-time window sampling architecture with machine learning to detect outlier traffic flow behavior which may indicate malicious/problematic network activity. For example, a network device may obtain a sample of traffic flow data during a defined time window. The sample of traffic flow data may comprise information associated with a sampled subset of traffic flows transferred by a network device in the defined time window. The network device may partition the defined time window into two or more sub-time windows. In each sub-time window, using machine learning, the network device may assign an outlier-related classification to each sampled traffic flow based on the relative behavioral characteristics of all the sampled traffic flows. The network device may aggregate the outlier-related classifications for each sampled traffic flow across multiple sub-time windows, and process traffic flows based on the aggregated outlier-related classifications.


    Zugriff

    Download


    Exportieren, teilen und zitieren



    Titel :

    ASSIGNING OUTLIER-RELATED CLASSIFICATIONS TO TRAFFIC FLOWS ACROSS MULTIPLE TIME WINDOWS


    Beteiligte:

    Erscheinungsdatum :

    2023-05-04


    Medientyp :

    Patent


    Format :

    Elektronische Ressource


    Sprache :

    Englisch


    Klassifikation :

    IPC:    G08G Anlagen zur Steuerung, Regelung oder Überwachung des Verkehrs , TRAFFIC CONTROL SYSTEMS



    Assigning outlier-related classifications to traffic flows across multiple time windows

    SESHA MADHUSOODHANA CHARI / SUKUMARAN SUNIL | Europäisches Patentamt | 2024

    Freier Zugriff

    Assigning user class link flows uniquely

    Boyce, David | Online Contents | 2013


    Assigning user class link flows uniquely

    Boyce, David / Xie, Jun | Elsevier | 2013