Label guided unsupervised learning based network-level application signature generation
US11528285B2 · kind B2 · utility
Assignee
Inventor
Key dates
| Filing date | Dec 16, 2019 |
| Grant date | Dec 13, 2022 |
| Priority date | — |
| Expiry date | Oct 8, 2040 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/1425
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
Application-initiated network traffic is intercepted and analyzed by an application firewall in order to identify streams of traffic for a target application. An application signature generator preprocesses the raw data packets from the intercepted network traffic by tokenizing the data packets and then weighting each token according to its importance for application identification. The weighted features for each data packet are clustered using an unsupervised learning model, and the resulting clusters are iteratively refined and re-clustered using a proximity score between the clusters and feature vectors for key tokens for the target application. The application signature generator generates a signature for the clusters corresponding to the target application which the application firewall implements for filtering network traffic.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.