公开(公告)号：US10129271B2

公开(公告)日：2018-11-13

申请号：US14723605

申请日：2015-05-28

Applicant: Cisco Technology, Inc.

Inventor： Jan Mrkos ,  Martin Grill ,  Jan Kohout

IPC: H04L29/06 ,  H04L29/08 ,  H04L29/12

Abstract: A method of tracking users over network hosts based on behavior includes analyzing data representing behavior of active network hosts during two or more time windows at a computing apparatus having connectivity to a network. Based on the analyzing, a profile is generated for each network host active in the network during the two or more time windows. Similarity between the profiles for the two or more time windows are determined and, based on the similarity, it may be determined that an identity associated with one of the active network hosts during a time window of the two or more time windows has changed.

公开(公告)号：US20160352760A1

公开(公告)日：2016-12-01

申请号：US14723605

申请日：2015-05-28

Applicant: Cisco Technology, Inc.

Inventor： Jan Mrkos ,  Martin Grill ,  Jan Kohout

IPC: H04L29/06 ,  H04L29/12 ,  H04L29/08

CPC classification number: H04L63/1416 ,  H04L61/103 ,  H04L61/2015 ,  H04L63/0281 ,  H04L63/1425 ,  H04L67/02 ,  H04L67/22 ,  H04L67/303

Abstract: A method of tracking users over network hosts based on behavior includes analyzing data representing behavior of active network hosts during two or more time windows at a computing apparatus having connectivity to a network. Based on the analyzing, a profile is generated for each network host active in the network during the two or more time windows. Similarity between the profiles for the two or more time windows are determined and, based on the similarity, it may be determined that an identity associated with one of the active network hosts during a time window of the two or more time windows has changed.

Abstract translation: 基于行为跟踪网络主机上的用户的方法包括分析表示在具有到网络的连接性的计算设备的两个或更多个时间窗口期间活动网络主机的行为的数据。 基于分析，在两个或更多个时间窗口期间，为在网络中活动的每个网络主机生成简档。 确定两个或更多个时间窗口的简档之间的相似性，并且基于相似性，可以确定在两个或更多个时间窗口的时间窗口期间与一个活动网络主机相关联的身份已经改变。