公开(公告)号：US20060236395A1

公开(公告)日：2006-10-19

申请号：US11241728

申请日：2005-09-30

申请人： David Barker ,  Clive Beavis ,  Robert Alasdair Bruce ,  Joan Garrett ,  Joshua Lubliner ,  Iain Robertson ,  Robert Ciccone ,  Prasad Akella

发明人： David Barker ,  Clive Beavis ,  Robert Alasdair Bruce ,  Joan Garrett ,  Joshua Lubliner ,  Iain Robertson ,  Robert Ciccone ,  Prasad Akella

IPC分类号： G06F12/14

CPC分类号： H04L63/1416 ,  G06F21/552 ,  H04L2463/102

摘要： A method is provided for conducting surveillance on a network. Data is captured on a network for a plurality of aggregated channels. The data is from individuals with network access identifiers that permit the individuals to gain access to the network, or applications on the network. The data is used to construct a plurality of session data streams. The session data streams provide a reconstruction of business activity participated in by the application or the individual with the network. A window of data is read in at least one of the plurality of session data streams to determine deviations. The window of data is tested against at least one filter. The at least one filter detects behavioral changes in the applications or the individuals that have the network access identifiers to access to the network. Defined intervention are taken in response to the deviations.

摘要翻译： 提供了一种用于在网络上进行监视的方法。 数据在网络上被捕获用于多个聚合信道。 数据来自具有允许个人访问网络或网络上的应用的具有网络访问标识符的个人。 该数据用于构建多个会话数据流。 会话数据流提供由应用程序或个人与网络参与的业务活动的重建。 在多个会话数据流中的至少一个中读取数据窗口以确定偏差。 根据至少一个过滤器测试数据窗口。 所述至少一个过滤器检测应用程序或具有访问网络的网络访问标识符的个人的行为变化。 定义的干预是针对偏差进行的。