Some content of this application is unavailable at the moment.
If this situation persists, please contact us atFeedback&Contact
1. (WO2017003593) CUSTOMIZED NETWORK TRAFFIC MODELS TO DETECT APPLICATION ANOMALIES
Latest bibliographic data on file with the International Bureau

Pub. No.: WO/2017/003593 International Application No.: PCT/US2016/034060
Publication Date: 05.01.2017 International Filing Date: 25.05.2016
Chapter 2 Demand Filed: 28.04.2017
IPC:
H04L 12/26 (2006.01) ,G06F 21/50 (2013.01) ,H04L 29/06 (2006.01)
H ELECTRICITY
04
ELECTRIC COMMUNICATION TECHNIQUE
L
TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
12
Data switching networks
02
Details
26
Monitoring arrangements; Testing arrangements
G PHYSICS
06
COMPUTING; CALCULATING; COUNTING
F
ELECTRIC DIGITAL DATA PROCESSING
21
Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
50
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
H ELECTRICITY
04
ELECTRIC COMMUNICATION TECHNIQUE
L
TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
29
Arrangements, apparatus, circuits or systems, not covered by a single one of groups H04L1/-H04L27/136
02
Communication control; Communication processing
06
characterised by a protocol
Applicants:
QUALCOMM INCORPORATED [US/US]; ATTN: International IP Administration 5775 Morehouse Drive San Diego, California 92121-1714, US
Inventors:
DAS, Saumitra Mohan; US
MAHMOUDI, Mona; US
SRIDHARA, Vinay; US
GUPTA, Rajarshi; US
CHEN, Yin; US
Agent:
HANSEN, Robert M.; US
HUANG, Stephen D.; US
Priority Data:
14/753,66629.06.2015US
Title (EN) CUSTOMIZED NETWORK TRAFFIC MODELS TO DETECT APPLICATION ANOMALIES
(FR) MODÈLES DE TRAFIC DE RÉSEAU PERSONNALISÉS POUR DÉTECTER DES ANOMALIES D'APPLICATION
Abstract:
(EN) Systems, methods, and devices of the various aspects enable identification of anomalous application behavior. A computing device processor may detect network communication activity of an application on the computing device. The processor may identify one or more device states of the computing device, and one or more categories of the application. The processor may determine whether the application is behaving anomalously based on a correlation of the detected network communication activity of the application, the identified one or more device states of the computing device, and the identified one or more categories of the application.
(FR) Selon différents aspects, la présente invention concerne des systèmes, des procédés et des dispositifs qui permettent l'identification d'un comportement d'application anormal. Un processeur de dispositif informatique peut détecter une activité de communication de réseau d'une application sur le dispositif informatique. Le processeur peut identifier un ou plusieurs états de dispositif du dispositif informatique, et une ou plusieurs catégories de l'application. Le processeur peut déterminer si l'application se comporte ou non de manière anormale sur la base d'une corrélation de l'activité de communication de réseau détectée de l'application, du ou des états de dispositif identifiés du dispositif informatique, et de la ou des catégories identifiées de l'application.
front page image
Designated States: AE, AG, AL, AM, AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, BZ, CA, CH, CL, CN, CO, CR, CU, CZ, DE, DK, DM, DO, DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, GT, HN, HR, HU, ID, IL, IN, IR, IS, JP, KE, KG, KN, KP, KR, KZ, LA, LC, LK, LR, LS, LU, LY, MA, MD, ME, MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, OM, PA, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SA, SC, SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, TN, TR, TT, TZ, UA, UG, US, UZ, VC, VN, ZA, ZM, ZW
African Regional Intellectual Property Organization (ARIPO) (BW, GH, GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, TZ, UG, ZM, ZW)
Eurasian Patent Organization (AM, AZ, BY, KG, KZ, RU, TJ, TM)
European Patent Office (AL, AT, BE, BG, CH, CY, CZ, DE, DK, EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, SM, TR)
African Intellectual Property Organization (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, KM, ML, MR, NE, SN, TD, TG)
Publication Language: English (EN)
Filing Language: English (EN)
Also published as:
CN107710687