-
公开(公告)号:US20240394587A1
公开(公告)日:2024-11-28
申请号:US18292748
申请日:2022-07-27
Applicant: WatchGuard Technologies, Inc.
Inventor: Anindya ROY , Eugen PANAITESCU , Li LI , Ramesh NATARAJAN
Abstract: A computer-implemented system and method generate a model of a plurality of features of network flow data. The model includes a composition of a plurality of Gaussian components, each of which may be skewed. The features are represented as a multivariate feature vector. Training is performed on the feature data using Gaussian Mixture Model (GMM) using Expectation Maximization. The feature data are assigned to clusters with corresponding probabilities. Once the model has been generated, it may be used to detect outlier activity.