Label guided unsupervised learning based network-level application signature generation

    公开(公告)号:US11888874B2

    公开(公告)日:2024-01-30

    申请号:US18051230

    申请日:2022-10-31

    发明人: Stefan Achleitner

    IPC分类号: H04L9/40 H04L43/026 G06F16/35

    摘要: Application-initiated network traffic is intercepted and analyzed by an application firewall in order to identify streams of traffic for a target application. An application signature generator preprocesses the raw data packets from the intercepted network traffic by tokenizing the data packets and then weighting each token according to its importance for application identification. The weighted features for each data packet are clustered using an unsupervised learning model, and the resulting clusters are iteratively refined and re-clustered using a proximity score between the clusters and feature vectors for key tokens for the target application. The application signature generator generates a signature for the clusters corresponding to the target application which the application firewall implements for filtering network traffic.

    Security ecosystem
    27.
    发明授权

    公开(公告)号:US11856030B2

    公开(公告)日:2023-12-26

    申请号:US17449823

    申请日:2021-10-04

    IPC分类号: H04L67/12 H04L9/40 H04L43/026

    摘要: A system, method, and apparatus for implementing workflows across multiple differing systems and devices is provided herein. During operation, a graphical-user interface provides a user with a list of triggers and a list of actions. A user creates a workflow by dragging a trigger and at least one action to an area of a screen (workspace) and then connecting them with a line or arc. If a security ecosystem is unable to execute the created workflow, the necessary components needed to execute the workflow will be provided in a small area on the screen (workspace).

    METHODS AND APPARATUS FOR DETERMINING UE APPROPRIATE STATES BY TRAFFIC TYPE DETECTION

    公开(公告)号:US20230413085A1

    公开(公告)日:2023-12-21

    申请号:US18366556

    申请日:2023-08-07

    申请人: MediaTek Inc.

    摘要: Apparatus and methods are provided for determining UE appropriate states by traffic type detection. In one novel aspect, a UE traffic type is determined based on a plurality of UE metrics. One or more UE settings for transmission and/or reception are adjusted based on the determined UE traffic type. The UE traffic type determination procedure and UE configuration adjustment procedure are iterated to balance performance and power saving. In one embodiment, the UE collects a plurality of UE metrics for a UE traffic profile matrix, wherein the UE traffic profile matrix is used to determine a plurality of UE traffic types based on the plurality of UE metrics. The UE determines a real-time UE traffic type based on the collected UE metrics using the UE traffic profile matrix and adjusts a set of UE configurations based on the UE traffic type when one or more predefined conditions are met.