Policy determination apparatus, policy determining method and program

    公开(公告)号:US12132655B2

    公开(公告)日:2024-10-29

    申请号:US17555209

    申请日:2021-12-17

    发明人: Takayuki Kamei

    摘要: A policy determination apparatus includes an acquisition unit, a metrics generation unit, an evaluation unit, and a policy determination unit. The acquisition unit acquires monitoring data relating to states of facilities on a network. The metrics generation unit generates, based on the monitoring data, time-series data of types of metrics associated with candidates of routing destinations to which a routing control apparatus routes requests. The evaluation unit evaluates the candidates based on the time-series data to generate routing destination evaluation data. The policy determination unit determines, based on the routing destination evaluation data, a policy that the routing control apparatus uses for control of the routing destinations.

    Anomaly detection device, anomaly detection method and anomaly detection program

    公开(公告)号:US12113816B2

    公开(公告)日:2024-10-08

    申请号:US17626817

    申请日:2019-07-23

    IPC分类号: H04L9/40 H04L43/04 H04L43/16

    摘要: An acquisition unit acquires a communication feature for normal communication of communication equipment. If a data count or a data acquisition period for the acquired communication feature exceeds a predetermined value, an amplification unit amplifies the data count for the communication feature by a plurality of predetermined schemes in accordance with data counts for respective groups, each group sharing a same 5-tuple. A creation unit creates, for each of the predetermined schemes, reference value information for normal communication of the communication equipment through learning using the amplified communication feature. A determination unit determines accuracy of abnormality detection for each of the predetermined schemes using an anomaly score representing a deviation of test data representing a communication feature for abnormal communication from the reference value information. A selection unit selects the reference value information created by one of the schemes, the determined accuracy for which is highest.

    COMMUNICATION METHOD AND COMMUNICATION APPARATUS

    公开(公告)号:US20240333619A1

    公开(公告)日:2024-10-03

    申请号:US18740939

    申请日:2024-06-12

    摘要: A communication method and a communication apparatus, and the communication method may include: a first communication apparatus obtains first data, where the first data may be network measurement data; the first communication apparatus obtains second data in a first processing manner based on the first data, where the second data is partial data of the first data, the second data is used to obtain third data, and an error between the third data and the first data is less than or equal to a target threshold; and the first communication apparatus sends the second data to a second communication apparatus. Accordingly, overheads for reporting the network measurement data can be reduced and utilization of network resources can be improved.

    CLUSTER SYSTEM MANAGEMENT METHOD AND APPARATUS

    公开(公告)号:US20240323109A1

    公开(公告)日:2024-09-26

    申请号:US18735468

    申请日:2024-06-06

    摘要: A cluster system management method is disclosed. The management method is used on a management node, the cluster system includes the management node and a plurality of compute nodes, the cluster system is responsible for processing service data in a preset area. According to the cluster system management method, the spatial-temporal distribution of the historical service data is analyzed, to obtain the spatial-temporal distribution characteristic of the historical service data, and based on the spatial-temporal distribution characteristic, the preset area is divided into the M sub-areas to achieve balanced data distribution. The compute nodes in the plurality of compute nodes are respectively responsible for processing the service data of the corresponding sub-areas, thereby implementing management based on spatial routing of the cluster system and improving reliability and a scale expansion capability of the cluster system.

    ACCESS LOGS FOR NETWORK ENTITIES TYPE CLASSIFICATION

    公开(公告)号:US20240320243A1

    公开(公告)日:2024-09-26

    申请号:US18731116

    申请日:2024-05-31

    申请人: Imperva, Inc.

    IPC分类号: G06F16/28 H04L9/40 H04L43/04

    摘要: Disclosed herein is a method by a computing system to classify network entities. The method includes receiving, by a first stage classifier, database logs and enterprise directory information, attempting to classify, by the first stage classifier during a first stage, a plurality of network entities appearing in the database logs into network entity types based on analyzing the database logs and the enterprise directory information, clustering, by a clustering component, the plurality of network entities into groups based on host name, classifying, by a second stage classifier during a second stage, one or more network entities of the plurality of network entities that were not able to be classified during the first stage into network entity types based on group types of the groups that the one or more network entities were clustered into, and outputting a network entity type of each of the plurality of network entities.