公开(公告)号：US10944763B2

公开(公告)日：2021-03-09

申请号：US16694020

申请日：2019-11-25

Applicant: Verint Systems Ltd.

Inventor： Ziv Katzir ,  Gershon Celnicker ,  Hed Kovetz

IPC: H04L29/06 ,  G06N20/00 ,  G06N20/10 ,  G06N5/00

Abstract: Embodiments for generating appropriate data sets for learning to identify user actions. A user uses one or more applications over a suitable period of time. As the user uses the applications, a monitoring device, acting as a “man-in-the-middle,” intermediates the exchange of encrypted communication between the applications and the servers that serve the applications. The monitoring device obtains, for each action performed by the user, two corresponding (bidirectional) flows of communication: an encrypted flow, and an unencrypted flow. Since the unencrypted flow indicates the type of action that was performed by the user, the correspondence between the encrypted flow and the unencrypted flow may be used to automatically label the encrypted flow, without decrypting the encrypted flow. Features of the encrypted communication may then be stored in association with the label to automatically generate appropriately-sized learning set for each application of interest.

公开(公告)号：US20180109542A1

公开(公告)日：2018-04-19

申请号：US15725069

申请日：2017-10-04

Applicant: Verint Systems Ltd.

Inventor： Ziv Katzir ,  Gershon Celnicker ,  Hed Kovetz

IPC: H04L29/06 ,  G06F15/18

CPC classification number: H04L63/1408 ,  G06N5/003 ,  G06N20/00 ,  G06N20/10 ,  H04L63/0227 ,  H04L63/0428 ,  H04L63/306

Abstract: Embodiments for generating appropriate data sets for learning to identify user actions. A user uses one or more applications over a suitable period of time. As the user uses the applications, a monitoring device, acting as a “man-in-the-middle,” intermediates the exchange of encrypted communication between the applications and the servers that serve the applications. The monitoring device obtains, for each action performed by the user, two corresponding (bidirectional) flows of communication: an encrypted flow, and an unencrypted flow. Since the unencrypted flow indicates the type of action that was performed by the user, the correspondence between the encrypted flow and the unencrypted flow may be used to automatically label the encrypted flow, without decrypting the encrypted flow. Features of the encrypted communication may then be stored in association with the label to automatically generate appropriately-sized learning set for each application of interest.

公开(公告)号：US20210168158A1

公开(公告)日：2021-06-03

申请号：US17154135

申请日：2021-01-21

Applicant: Verint Systems Ltd.

Inventor： Ziv Katzir ,  Gershon Celnicker ,  Hed Kovetz

IPC: H04L29/06 ,  G06N20/00

Abstract: Embodiments for generating appropriate data sets for learning to identify user actions. A user uses one or more applications over a suitable period of time. As the user uses the applications, a monitoring device, acting as a “man-in-the-middle,” intermediates the exchange of encrypted communication between the applications and the servers that serve the applications. The monitoring device obtains, for each action performed by the user, two corresponding (bidirectional) flows of communication: an encrypted flow, and an unencrypted flow. Since the unencrypted flow indicates the type of action that was performed by the user, the correspondence between the encrypted flow and the unencrypted flow may be used to automatically label the encrypted flow, without decrypting the encrypted flow. Features of the encrypted communication may then be stored in association with the label to automatically generate appropriately-sized learning set for each application of interest.

公开(公告)号：US20200169571A1

公开(公告)日：2020-05-28

申请号：US16694020

申请日：2019-11-25

Applicant: Verint Systems Ltd.

Inventor： Ziv Katzir ,  Gershon Celnicker ,  Hed Kovetz

IPC: H04L29/06 ,  G06N20/00

Abstract: Embodiments for generating appropriate data sets for learning to identify user actions. A user uses one or more applications over a suitable period of time. As the user uses the applications, a monitoring device, acting as a “man-in-the-middle,” intermediates the exchange of encrypted communication between the applications and the servers that serve the applications. The monitoring device obtains, for each action performed by the user, two corresponding (bidirectional) flows of communication: an encrypted flow, and an unencrypted flow. Since the unencrypted flow indicates the type of action that was performed by the user, the correspondence between the encrypted flow and the unencrypted flow may be used to automatically label the encrypted flow, without decrypting the encrypted flow. Features of the encrypted communication may then be stored in association with the label to automatically generate appropriately-sized learning set for each application of interest.