Behavioural-based network anomaly detection based on user...

Details Behavioural-based network anomaly detection based on user... Behavioural-based network anomaly detection based on user...

H - Electricity

04

L

H04L 12/26 (2006.01) H04L 9/00 (2006.01) H04L 29/14 (2006.01)

Patent

CA 2531410

A baseline can be defined using specific attributes of the network traffic. Using the established baseline, deviation can then be measured to detect anomaly on the network. The accuracy of the baseline is the most important criterion of any effective network anomaly detection technique. In a local area network (LAN) environment, the attributes change very frequently by many change agents; for example, new entities, such as users, application, and network-enabled devices, added to and removed from the LAN environment. The invention provides an improved method of establishing a baseline for network anomaly detection based on user's behaviour profiling. A user behaviour profiling is a distinct network usage pattern pertaining to a specific individual user operating on the LAN environment. No two users profiling would be the same. A group of users that have similar network usage attributes can be extrapolated using data mining technique to establish a group profiling baseline to detect network usage anomaly. By combining user and group profiling, a network anomaly detection system can measure subtle shift in network usage and as a result separate good user's network usage behaviour from the bad one. Using the said technique, a lower rate of false positives of network anomaly can be created that is suitable to operate in a highly dynamic LAN environment.

Affiliated with

Also associated with

Rating

Behavioural-based network anomaly detection based on user... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Behavioural-based network anomaly detection based on user..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Behavioural-based network anomaly detection based on user... will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFCA-PAI-O-1711526