The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Oct. 24, 2023

Filed:

Jan. 31, 2022
Applicant:

Splunk Inc., San Francisco, CA (US);

Inventors:

George Apostolopoulos, San Jose, CA (US);

Zhuxuan Jin, Sunnyvale, CA (US);

Assignee:

Splunk Inc., San Francisco, CA (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 41/0893 (2022.01); H04L 41/14 (2022.01); H04L 9/40 (2022.01); H04L 41/082 (2022.01); H04L 43/02 (2022.01); H04L 43/04 (2022.01); H04L 41/22 (2022.01); H04L 67/303 (2022.01); G06F 18/2415 (2023.01);
U.S. Cl.
CPC ...
H04L 41/0893 (2013.01); G06F 18/24155 (2023.01); H04L 41/082 (2013.01); H04L 41/145 (2013.01); H04L 41/22 (2013.01); H04L 43/02 (2013.01); H04L 43/04 (2013.01); H04L 63/1425 (2013.01); H04L 67/303 (2013.01);
Abstract

One or more embodiments are directed multistage device clustering. A log including network traffic of multiple devices in a network is received. From the log, features of the devices are extracted and an aggregated feature matrix generated. A traffic behavior subset of the features in the aggregated feature matrix is selected, and a topic modeling algorithm applied thereto to obtain traffic behavior device groups. An application behavior subset of the features in the aggregated feature matrix is selected. On a per traffic behavior device group basis, the topic modeling algorithm is applied to the application behavior subset to obtain application behavior device subgroups. One or more devices are assigned to at least one of the plurality of application behavior device subgroups to obtain an assignment.


Find Patent Forward Citations

Loading…