Device discovery and classification from encrypted network traffic
US11455569B2 · kind B2 · utility
2Cited by
3References
17Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Jan 9, 2019 |
| Grant date | Sep 27, 2022 |
| Priority date | — |
| Expiry date | Jul 11, 2040 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06N20/10
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
Handshake protocol layer features are extracted from training data associated with encrypted network traffic of a plurality of classified devices. Record protocol layer features are extracted from the training data. One or more models are trained based on the extracted handshake protocol layer features and the extracted record protocol layer features. The one or more models are applied to an observed encrypted network traffic stream associated with a device to determine a predicted device classification of the device.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.