公开(公告)号：US10924502B2

公开(公告)日：2021-02-16

申请号：US15394486

申请日：2016-12-29

Applicant: NOBLIS, INC.

Inventor： Matthew K. Monaco ,  Daniel Negron ,  Brian Satira ,  Michael Collins

IPC: G06F21/55 ,  H04L29/06

Abstract: Techniques for providing network security and anomaly detection are disclosed. In some embodiments, network traffic may be monitored in order to create a model of network traffic over a first period of time. Based on the model of network traffic, one or more inflated files may be created and stored on a system, wherein the inflated files are of a sufficient file size such that attempts to exfiltrate one or more of the files may be detected based by network monitoring tools. The inflated files may further include one or more indicators of sensitivity, including indicators of the presence of sensitive information that is not actually included in the inflated files. Network traffic characteristics may then be repeatedly or continuously monitored in order to update the size of the one or more inflated files based on changes in network traffic characteristics.