The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Sep. 08, 2020

Filed:

Feb. 19, 2019
Applicant:

Palo Alto Networks, Inc., Santa Clara, CA (US);

Inventors:

Gong Cheng, Sunnyvale, CA (US);

Pui-Chuen Yip, Cupertino, CA (US);

Zhiwei Xiao, Palo Alto, CA (US);

Ran Xia, Campbell, CA (US);

Mei Wang, Saratoga, CA (US);

Assignee:

Palo Alto Networks, Inc., Santa Clara, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); H04L 12/26 (2006.01); H04L 29/08 (2006.01); H04L 12/24 (2006.01);
U.S. Cl.
CPC ...
H04L 63/1425 (2013.01); H04L 41/069 (2013.01); H04L 43/00 (2013.01); H04L 43/12 (2013.01); H04L 67/12 (2013.01); H04L 67/303 (2013.01);
Abstract

Data packets transmitted to and from an IoT device are obtained and at least one of the data packets are analyzed using deep packet inspection to identify transaction data from payload of the at least one of the data packets. An event log is generated for the IoT device from the transaction data, the event log, at least in part, used to generate a historical record for the IoT device. The IoT device is profiled into a device profile based on the historical record for the IoT device. The event log is updated in real-time to indicate current operation of the IoT device. Abnormal device behavior of the IoT device is determined using the event log and the device profile. The device profile is updated to indicate the abnormal device behavior of the IoT device.


Find Patent Forward Citations

Loading…