公开(公告)号：US20220164697A1

公开(公告)日：2022-05-26

申请号：US17102471

申请日：2020-11-24

Applicant: AT&T Intellectual Property I, L.P. ,  AT&T Technical Services Company, Inc.

Inventor： Ganesh Subramaniam ,  Robert Archibald ,  Richard Hellstern

IPC: G06N20/00 ,  G06N5/02

Abstract: Creating and using learning models to identify botnet traffic can include obtaining netflow data associated with a connecting device that is communicating with a carrier network. The netflow data can represent communications associated with the connecting device. Data features associated with the communications can be extracted. The data features can include statistical information associated with the communications. A learning model based on the data features extracted from the netflow data can be trained. A prediction using the learning model can be generated, and an action based on the prediction can be taken.

公开(公告)号：US20230412622A1

公开(公告)日：2023-12-21

申请号：US17842940

申请日：2022-06-17

Applicant: AT&T Intellectual Property I, L.P.

Inventor： Srivathsan Srinivasagopalan ,  Ganesh Subramaniam ,  Robert Archibald

IPC: H04L9/40 ,  G06N20/20

CPC classification number: H04L63/1425 ,  G06N20/20

Abstract: Aspects of the subject disclosure may include, for example, obtaining a first group of Internet Protocol (IP) addresses from a group of network devices, and determining a second group of IP addresses from the first group of IP addresses includes possible malicious IP addresses utilizing a machine learning application. Further embodiments can include obtaining a first group of attributes of malicious IP addresses from a first repository, and determining a third group of IP addresses from the second group of IP addresses includes possible malicious IP addresses based on the first group of attributes. Additional embodiments can include receiving user-generated input indicating a fourth group of IP addresses from the third group of IP addresses includes possible malicious IP addresses, and transmitting a notification to a group of communication devices indicating that the fourth group of IP address includes possible malicious IP addresses. Other embodiments are disclosed.

公开(公告)号：US12261865B2

公开(公告)日：2025-03-25

申请号：US17842940

申请日：2022-06-17

Applicant: AT&T Intellectual Property I, L.P.

Inventor： Srivathsan Srinivasagopalan ,  Ganesh Subramaniam ,  Robert Archibald

IPC: H04L9/40 ,  G06N20/20

Abstract: Aspects of the subject disclosure may include, for example, obtaining a first group of Internet Protocol (IP) addresses from a group of network devices, and determining a second group of IP addresses from the first group of IP addresses includes possible malicious IP addresses utilizing a machine learning application. Further embodiments can include obtaining a first group of attributes of malicious IP addresses from a first repository, and determining a third group of IP addresses from the second group of IP addresses includes possible malicious IP addresses based on the first group of attributes. Additional embodiments can include receiving user-generated input indicating a fourth group of IP addresses from the third group of IP addresses includes possible malicious IP addresses, and transmitting a notification to a group of communication devices indicating that the fourth group of IP address includes possible malicious IP addresses. Other embodiments are disclosed.