The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Jul. 28, 2020
Filed:
Apr. 10, 2018
Trend Micro Incorporated, Tokyo, JP;
Josiah Dede Hagen, Round Rock, TX (US);
Jonathan Edward Andersson, Round Rock, TX (US);
Shoufu Luo, Austin, TX (US);
Brandon Niemczyk, Hutto, TX (US);
Leslie Zsohar, Austin, TX (US);
Craig Botkin, Austin, TX (US);
Peter Andriukaitis, Austin, TX (US);
Trend Micro Incorporated, Tokyo, JP;
Abstract
In one embodiment, local begin and end tags are detected by a network security device to determine a local context of a network traffic flow, and a local feature vector is obtained for that local context. At least one triggering machine learning model is applied by the network security device to the local feature vector, and the result determines whether or not deeper analysis is warranted. In most cases, very substantial resources are not required because deeper analysis is not indicated. If deeper analysis is indicated, one or more deeper machine learning model may then be applied to global and local feature vectors, and regular expressions may be applied to packet data, which may include the triggering data packet and one or more subsequent data packets. Other embodiments, aspects and features are also disclosed.