Real-time detection of abnormal network connections in streaming data
Abstract:
Methods and systems for detecting anomalous network activity include determining whether a network event exists within an existing topology graph and port graph. A connection probability for the network event is determined if the network does not exist within the existing topology graph and port graph. The network event is identified as abnormal if the connection probability is below a threshold.
Information query
Patent Agency Ranking
0/0