公开(公告)号：US11206286B2

公开(公告)日：2021-12-21

申请号：US16430869

申请日：2019-06-04

Applicant: Qatar Foundation for Education, Science and Community Development

Inventor： Yury Zhauniarovich ,  Priyanka Dodia

IPC: H04L29/06

Abstract: A method for reducing unwanted data traffic in a computer network due to a Distributed Reflection Denial of Service (DRDoS) attack. The method comprises operating a filtering module in a normal mode or a blocking mode to allow or block requests from being communicated within a computer network in response to data from a honeypot device in the computer network. The method allows the honeypot device to continue to monitor further attack requests that are received during the DRDoS attack.

公开(公告)号：US20240154997A1

公开(公告)日：2024-05-09

申请号：US18387937

申请日：2023-11-08

Applicant: Qatar Foundation for Education, Science and Community Development

Inventor： Priyanka Dodia ,  Mashael Al Sabah

IPC: H04L9/40 ,  G06N20/00

CPC classification number: H04L63/145 ,  G06N20/00 ,  H04L63/1425

Abstract: A machine learning model for classifying encrypted traffic as benign or malicious without having to decrypt the traffic is provided that used traffic patterns from network logs to classify the traffic based on learned patterns for malware, and is capable of identifying zero-day malware is provided via: extracting encrypted traffic from communication logs for a network; identifying, from the encrypted traffic, while still encrypted, traffic patterns for users of the network; and classifying, via a machine learning model, the encrypted traffic as benign traffic or malicious traffic without decrypting the encrypted traffic according to the traffic patterns identified.