公开(公告)号：US11930039B1

公开(公告)日：2024-03-12

申请号：US17527993

申请日：2021-11-16

Applicant: Amazon Technologies, Inc.

Inventor： Sarath Geethakumar ,  Wayne Chiang ,  Shravan Kumar Gopal ,  Yash Zalavadia

IPC: H04L9/40 ,  G06F18/21 ,  G06F18/22 ,  G06F18/23 ,  G06N20/00

CPC classification number: H04L63/1458 ,  G06F18/217 ,  G06F18/22 ,  G06F18/23 ,  G06N20/00 ,  H04L63/1416 ,  H04L63/1425

Abstract: Devices and techniques are generally described for detection of network anomalies. In various examples, first data describing network communication between a plurality of source entities and a plurality of destination entities may be received. In some examples, respective feature data representing network communication between a respective source entity and one or more of the plurality of destination entities may be generated. In some examples, an unsupervised machine learning model may be used to determine a first number of clusters of the feature data. In various cases, a first source entity that is an outlier with respect to the first number of clusters may be determined based at least in part on the first number of clusters. The first source entity may be classified as an anomalous entity.