首页>
外国专利>
DYNAMIC DEEP PACKET INSPECTION FOR ANOMALY DETECTION
DYNAMIC DEEP PACKET INSPECTION FOR ANOMALY DETECTION
展开▼
机译:动态深层检测,异常检测
展开▼
页面导航
摘要
著录项
相似文献
摘要
In one embodiment, a device in a network captures a first set of packets based on first packet capture criterion. The captured first set of packets is provided for deep packet inspection and anomaly detection. The device receives a second packet capture criterion that differs from the first packet capture criterion. The device captures a second set of packets based on the second packet capture criterion. The device provides the captured second set of packets for deep packet inspection and anomaly detection. The anomaly detection of the captured first and second sets of packets is performed by a machine learning-based anomaly detector configured to generate anomaly detection results based in part on one or more traffic metrics gathered from the network and based further in part on deep packet inspection results of packets captured in the network.
展开▼