公开(公告)号：US11223625B2

公开(公告)日：2022-01-11

申请号：US15858804

申请日：2017-12-29

Applicant: Avast Software s.r.o.

Inventor： Jeroen De Knijf ,  Amit Siwal ,  Shaul Levi

IPC: H04L29/06 ,  G06F16/20 ,  H04L29/08 ,  H04W4/70 ,  H04W12/122 ,  G06F21/52 ,  G06F21/55 ,  G06F21/56 ,  H04L12/24 ,  H04L12/26

Abstract: Malicious behavior of a device on a local network may be detected. A data stream from a device may be collected. A functional group may be created using behavioral data of devices of a known type. A behavior profile for the functional group may be generated and stored in a database. The data stream of the device is compared to the behavior profile of the functional group. A malicious behavior is indicated for the device in response to determining that the device's current behavior is not within a predetermined or configurable threshold of the behavior profile.

公开(公告)号：US20180191746A1

公开(公告)日：2018-07-05

申请号：US15858804

申请日：2017-12-29

Applicant: Avast Software s.r.o.

Inventor： Jeroen De Knijf ,  Amit Siwal ,  Shaul Levi

IPC: H04L29/06 ,  G06F21/52 ,  G06F21/55 ,  G06F21/56

CPC classification number: H04L63/1408 ,  G06F16/20 ,  G06F21/52 ,  G06F21/554 ,  G06F21/56 ,  H04L41/50 ,  H04L43/0876 ,  H04L63/102 ,  H04L63/104 ,  H04L63/14 ,  H04L63/1458 ,  H04L67/12 ,  H04L67/30 ,  H04W4/70 ,  H04W12/12

Abstract: Malicious behavior of a device on a local network may be detected. A data stream from a device may be collected. A functional group may be created using behavioral data of devices of a known type. A behavior profile for the functional group may be generated and stored in a database. The data stream of the device is compared to the behavior profile of the functional group. A malicious behavior is indicated for the device in response to determining that the device's current behavior is not within a predetermined or configurable threshold of the behavior profile.