The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Aug. 30, 2022

Filed:

Aug. 30, 2019
Applicant:

Zhengzhou Yunhai Information Technology Co., Ltd., Henan, CN;

Inventors:

Dongdong Su, Henan, CN;

Wei Liu, Henan, CN;

Deshan Zhang, Henan, CN;

Attorneys:
Primary Examiner:
Int. Cl.
CPC ...
H04L 41/14 (2022.01);
U.S. Cl.
CPC ...
H04L 41/14 (2013.01);
Abstract

Provided are a method, apparatus, device for determining a network anomaly behavior. The method includes: acquiring network data traffic in a target network, and determining each data packet contained in the network data traffic as a node of a complete graph, to construct a data complete graph; optimizing the data complete graph into a minimum spanning tree by a Kruskal algorithm, and determining each node of the minimum spanning tree as a cluster center; classifying all data packets contained in the network data traffic based on cluster centers, to acquire data element sets corresponding to the cluster centers respectively; and determining an anomaly behavior in the target network based on a type of each of the data element sets, wherein the type of the data element set is determined by a type of a network attack contained in the network data traffic.


Find Patent Forward Citations

Loading…