System and method for extracting signatures from controlled execution of applications and using them on traffic traces
US10332005B1 · kind B1 · utility
26Cited by
3References
42Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Sep 25, 2012 |
| Grant date | Jun 25, 2019 |
| Priority date | — |
| Expiry date | Jan 10, 2034 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06N99/00
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
Embodiments of the invention provide a method, system, and computer readable medium for classifying network traffic based on application signatures generated during a training phase. The application signatures are generated based on tokens extracted from a training set that is generated by a particular application during the training phase. Accordingly, a new token extracted in real-time from current network data is compared to the application signatures to determine if the current network data is generated by the particular application.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.