Microsoft Technology Licensing, LLC

Shai Baruch Nahum

Royi Ronen

Hanan Shteingart

Tomer Teller

Hani Neuvirth-Telem

Yuri Gabaev

Vlad Korsunsky

Oleg Yanovsky

Detecting a volumetric attack on a computer network with fewer false positives and while also requiring fewer processing resources is provided. The systems and methods described herein use observations taken at the network level to observe network traffic to form a predictive model for future traffic. When the network's future traffic sufficiently exceeds the predictive model, the monitoring systems and methods will indicate to the network to take security measures. The traffic to the network may be observed in subsets, corresponding to various groupings of sources, destinations, and protocols so that security measures may be targeted to that subset without affecting other machines in the network.

Detecting volumetric attacks

Growing community of inventors

Netanya, Israel

Shai Baruch Nahum