(12) International Application Status Report

Received at International Bureau: 12 June 2016 (12.06.2016)

Information valid as of: 03 October 2017 (03.10.2017)

Report generated on: 27 February 2020 (27.02.2020)

(10) Publication number: (43) Publication date: (26) Publication language:
WO 2017/00359305 January 2017 (05.01.2017) English (EN)

(21) Application number: (22) Filing date: (25) Filing language:
PCT/US2016/03406025 May 2016 (25.05.2016) English (EN)

(31) Priority number(s): (32) Priority date(s): (33) Priority status:
14/753,666 (US)29 June 2015 (29.06.2015) Priority document received (in compliance with PCT Rule 17.1)

(51) International Patent Classification:
H04L 12/26 (2006.01); G06F 21/50 (2013.01); H04L 29/06 (2006.01)

(71) Applicant(s):
QUALCOMM INCORPORATED [US/US]; ATTN: International IP Administration 5775 Morehouse Drive San Diego, California 92121-1714 (US) (for all designated states)

(72) Inventor(s):
DAS, Saumitra Mohan; 5775 Morehouse Drive San Diego, California 92121-1714 (US)
MAHMOUDI, Mona; 1741 Killdeer Ct. Sunnyvale, California 94087 (US)
SRIDHARA, Vinay; 5775 Morehouse Drive San Diego, California 92121-1714 (US)
GUPTA, Rajarshi; 5775 Morehouse Drive San Diego, California 92121-1714 (US)
CHEN, Yin; 5775 Morehouse Drive San Diego, California 92121-1714 (US)

(74) Agent(s):
HANSEN, Robert M.; The Marbury Law Group, PLLC 11800 Sunrise Valley Drive 15th Floor Reston, Virginia 20191 (US)

(54) Title (EN): CUSTOMIZED NETWORK TRAFFIC MODELS TO DETECT APPLICATION ANOMALIES
(54) Title (FR): MODÈLES DE TRAFIC DE RÉSEAU PERSONNALISÉS POUR DÉTECTER DES ANOMALIES D'APPLICATION

(57) Abstract:
(EN): Systems, methods, and devices of the various aspects enable identification of anomalous application behavior. A computing device processor may detect network communication activity of an application on the computing device. The processor may identify one or more device states of the computing device, and one or more categories of the application. The processor may determine whether the application is behaving anomalously based on a correlation of the detected network communication activity of the application, the identified one or more device states of the computing device, and the identified one or more categories of the application.
(FR): Selon différents aspects, la présente invention concerne des systèmes, des procédés et des dispositifs qui permettent l'identification d'un comportement d'application anormal. Un processeur de dispositif informatique peut détecter une activité de communication de réseau d'une application sur le dispositif informatique. Le processeur peut identifier un ou plusieurs états de dispositif du dispositif informatique, et une ou plusieurs catégories de l'application. Le processeur peut déterminer si l'application se comporte ou non de manière anormale sur la base d'une corrélation de l'activité de communication de réseau détectée de l'application, du ou des états de dispositif identifiés du dispositif informatique, et de la ou des catégories identifiées de l'application.

International search report:
Received at International Bureau: 18 July 2016 (18.07.2016) [EP]

International Report on Patentability (IPRP) Chapter II of the PCT:
Chapter II demand received: 28 April 2017 (28.04.2017)

(81) Designated States:
AE, AG, AL, AM, AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, BZ, CA, CH, CL, CN, CO, CR, CU, CZ, DE, DK, DM, DO, DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, GT, HN, HR, HU, ID, IL, IN, IR, IS, JP, KE, KG, KN, KP, KR, KZ, LA, LC, LK, LR, LS, LU, LY, MA, MD, ME, MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, OM, PA, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SA, SC, SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, TN, TR, TT, TZ, UA, UG, US, UZ, VC, VN, ZA, ZM, ZW
European Patent Office (EPO) : AL, AT, BE, BG, CH, CY, CZ, DE, DK, EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, SM, TR
African Intellectual Property Organization (OAPI) : BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, KM, ML, MR, NE, SN, TD, TG
African Regional Intellectual Property Organization (ARIPO) : BW, GH, GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, TZ, UG, ZM, ZW
Eurasian Patent Organization (EAPO) : AM, AZ, BY, KG, KZ, RU, TJ, TM

Declarations:
Declaration made as applicant's entitlement, as at the international filing date, to apply for and be granted a patent (Rules 4.17(ii) and 51bis.1(a)(ii)), in a case where the declaration under Rule 4.17(iv) is not appropriate
Declaration made as applicant's entitlement, as at the international filing date, to claim the priority of the earlier application, where the applicant is not the applicant who filed the earlier application or where the applicant's name has changed since the filing of the earlier application (Rules 4.17(iii) and 51bis.1(a)(iii))