Back to results
US 12,587,557 B2Granted
Detection method of network anomaly and anomaly detection apparatus
AssigneeWistron Corporation
InventorYuan Fu Huang
Life of this patent
Estimating the term…
Abstract
A detection method of network anomaly and an anomaly detection apparatus are disclosed. In the detection method, one or more request intervals within a detection period are determined, where each of the request intervals is a time interval of two network requests from a network source. A network request anomaly from the network source is determined according to the request interval within the detection period.
Claims18
A detection method of network anomaly, adapted to be executed by a processor, the detection method comprising:
- determining at least one request interval within a detection period, wherein each of the request intervals is a time interval of two network requests from a network source;
- and
- determining a network request anomaly from the network source according to the at least one request interval within the detection period, wherein determining the network request anomaly from the network source according to the at least one request interval within the detection period comprises:
- determining a number of occurrences of an anomalous interval where the at least one request interval is determined as the anomalous interval within the detection period;
- and
- determining the network request anomaly from the network source in response to the number of occurrences of the anomalous interval within a statistical period does not meet normal conditions, wherein the statistical period includes a plurality of the detection periods.
3 more elements
An anomaly detection apparatus, comprising:
- a communication transceiver;
- a storage, storing a program code;
- and
- a processor, coupled to the communication transceiver and the storage, loading the program code to execute:
- determining at least one request interval within a detection period, wherein each of the request intervals is a time interval of two network requests from a network source received from the communication transceiver;
- and
- determining the network request anomaly from the network source according to the at least one request interval within the detection period,
- wherein the processor further executes:
- determining a number of occurrences of an anomalous interval where the at least one request interval is determined as the anomalous interval within the detection period;
- and
- determining the network request anomaly from the network source in response to the number of occurrences of the anomalous interval within a statistical period does not meet normal conditions, wherein the statistical period includes a plurality of the detection periods.
8 more elements
Dependencies are inferred from the claim text.