The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
May. 26, 2026

Filed:

Jul. 07, 2022
Applicant:

Darktrace Holdings Limited, Cambridge, GB;

Inventors:

Dickon Murray Humphrey, Cambridge, GB;

Timothy Owen Bazalgette, Knebworth, GB;

Stephen Casey, Cambridge, GB;

Jack Benjamin Stockdale, Cambridge, GB;

Assignee:
Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/57 (2013.01); G06F 11/3604 (2025.01); G06F 21/53 (2013.01); H04L 9/40 (2022.01); H04L 41/16 (2022.01);
U.S. Cl.
CPC ...
H04L 63/1416 (2013.01); G06F 11/3604 (2013.01); G06F 21/53 (2013.01); G06F 21/577 (2013.01); H04L 41/16 (2013.01); H04L 63/1425 (2013.01); H04L 63/1433 (2013.01); H04L 63/1441 (2013.01); G06F 2221/034 (2013.01);
Abstract

A method for a cyber threat defense system is provided. The method comprises receiving a first abnormal behavior pattern where the first abnormal behavior pattern represents behavior on a first network deviating from a normal benign behavior of that network; and receiving a second abnormal behavior pattern where the second abnormal behavior pattern representing either behavior on the first network or on a second network deviating from a normal benign behavior of that network. The method further comprises comparing the first and second abnormal behavior patterns to determine a similarity score between the first and second abnormal behavior patterns and determining, based on the comparison, that the first abnormal behavior pattern likely corresponds to malicious behavior when the similarity score is above a threshold. A corresponding non-transitory computer readable medium is also provided.


Find Patent Forward Citations

Loading…