Patent · US Active

System, method, and computer program product for network anomaly detection

US11769199B2 · kind B2 · utility

0Cited by
0References
20Claims
0Family size

Assignee

Inventors

Key dates

Filing dateApr 14, 2021
Grant dateSep 26, 2023
Priority date
Expiry dateMar 22, 2042

Classification

  • Technology area (CPC H)Electricity
  • CPC primaryH04L63/10
  • WIPO fieldDigital communication
  • WIPO sectorElectrical engineering

Abstract

Provided are a system, method, and computer program product for network anomaly detection. The method includes receiving event data associated with a plurality of events in a computer network. The method also includes determining nested groups of the event data representing tiers of an operational hierarchy. The method further includes generating display data to show a graphical representation of the event including a plurality of nested graphical nodes and at least one spline. Each graphical node is associated with a group or a computer node, each graphical node encompasses and/or is encompassed by another graphical node, a size of each graphical node is proportional to an aggregated parameter value of events associated therewith, each spline connects at least two graphical nodes and includes a curve that passes through a common graphical node, and each spline is associated with a communication between at least two computer nodes.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.