公开(公告)号：US12301598B2

公开(公告)日：2025-05-13

申请号：US17446453

申请日：2021-08-30

Applicant: AT&T INTELLECTUAL PROPERTY I, L.P.

Inventor： Melissa Lee ,  Johan Muedsam

IPC: H04L9/40 ,  H04L29/06

Abstract: A method for detecting anomalous streaming network traffic data in real time includes: creating an anomaly detection model including a singular value matrix and a data pattern matrix from a matrix of historical network traffic data; storing the singular value matrix and the data pattern matrix of the anomaly detection model; receiving streaming network traffic data; performing a log transform on the streaming network traffic data; applying the anomaly detection model to a matrix of the streaming network traffic data in real time as the streaming network traffic data is received; detecting anomalous patterns in the streaming network traffic data based on patterns identified by the anomaly detection model; and associating the anomalous patterns in the streaming network traffic data with IP addresses.

公开(公告)号：US20210392152A1

公开(公告)日：2021-12-16

申请号：US17446453

申请日：2021-08-30

Applicant: AT&T INTELLECTUAL PROPERTY I, L.P.

Inventor： Melissa Lee ,  Johan Muedsam

IPC: H04L29/06

Abstract: A method for detecting anomalous streaming network traffic data in real time includes: creating an anomaly detection model including a singular value matrix and a data pattern matrix from a matrix of historical network traffic data; storing the singular value matrix and the data pattern matrix of the anomaly detection model; receiving streaming network traffic data; performing a log transform on the streaming network traffic data; applying the anomaly detection model to a matrix of the streaming network traffic data in real time as the streaming network traffic data is received; detecting anomalous patterns in the streaming network traffic data based on patterns identified by the anomaly detection model; and associating the anomalous patterns in the streaming network traffic data with IP addresses.

公开(公告)号：US11218879B2

公开(公告)日：2022-01-04

申请号：US16210601

申请日：2018-12-05

Applicant: AT&T Intellectual Property I, L.P.

Inventor： Joshua Whitney ,  Meredith Ordway-West ,  Aarthi Reddy ,  Melissa Lee ,  Mukund Rao

IPC: H04W12/104 ,  H04W24/08 ,  H04L12/851 ,  H04W4/02 ,  G06F16/29 ,  G06N7/00 ,  H04W40/20 ,  H04W12/63

Abstract: A method, computer-readable medium, and apparatus for classifying IP network traffic are disclosed. For example, a method may include a processor for applying a regularized probabilistic model to internet protocol network traffic for performing geolocation, wherein the internet protocol network traffic contains internet protocol address information, detecting an outlier in the internet protocol network traffic, wherein the outlier is associated with a transaction over a network, and performing a remedial action to address the outlier.

公开(公告)号：US11108795B2

公开(公告)日：2021-08-31

申请号：US15989512

申请日：2018-05-25

Applicant: AT&T Intellectual Property I, L.P.

Inventor： Melissa Lee ,  Johan Muedsam

IPC: G06F21/56 ,  H04L29/06

Abstract: A method for detecting anomalous streaming network traffic data in real time includes: creating an anomaly detection model including a singular value matrix and a data pattern matrix from a matrix of historical network traffic data; storing the singular value matrix and the data pattern matrix of the anomaly detection model; receiving streaming network traffic data; performing a log transform on the streaming network traffic data; applying the anomaly detection model to a matrix of the streaming network traffic data in real time as the streaming network traffic data is received; detecting anomalous patterns in the streaming network traffic data based on patterns identified by the anomaly detection model; and associating the anomalous patterns in the streaming network traffic data with IP addresses.

公开(公告)号：US10958677B2

公开(公告)日：2021-03-23

申请号：US16224406

申请日：2018-12-18

Applicant: AT&T Intellectual Property I, L.P.

Inventor： Melissa Lee

IPC: H04L29/06 ,  H04L12/721

Abstract: A processing system including at least one processor may obtain network traffic data of a network, including a first set of flow data associated with a first node, determine an anomaly factor of the first node from the network traffic data quantifying a deviation of the first set of flow data from a normal flow data associated with the first node, generate an exposure score of the first node in accordance with a measured influence of the first node in the network and the anomaly factor, generate a persistence score of the first node in accordance with a reputation measure of the first node and a measure of a recurrence of anomalous flow data associated with the first node, calculate a threat level of the first node from the exposure score and the persistence score, and reconfigure at least one aspect of the network in response to the threat level.

公开(公告)号：US20200187009A1

公开(公告)日：2020-06-11

申请号：US16210601

申请日：2018-12-05

Applicant: AT&T Intellectual Property I, L.P.

Inventor： Joshua Whitney ,  Meredith Ordway-West ,  Aarthi Reddy ,  Melissa Lee ,  Mukund Rao

IPC: H04W12/10 ,  H04W24/08 ,  H04L12/851 ,  H04W40/20 ,  G06F16/29 ,  G06N7/00 ,  H04W12/00 ,  H04W4/02

Abstract: A method, computer-readable medium, and apparatus for classifying IP network traffic are disclosed. For example, a method may include a processor for applying a regularized probabilistic model to internet protocol network traffic for performing geolocation, wherein the internet protocol network traffic contains internet protocol address information, detecting an outlier in the internet protocol network traffic, wherein the outlier is associated with a transaction over a network, and performing a remedial action to address the outlier.