Implicit relationship discovery based on network activity profile similarities

A non-transitory computer-readable storage medium storing instructions which, when executed by one or more processors, cause the one or more processors to:

• determine a first set of endpoints with which a first endpoint has communicated over a network during a first time interval;
• determine a second set of endpoints with which a second endpoint has communicated over the network during the first time interval;
• determine, based on an intersection between the first set of endpoints and the second set of endpoints, an extent of relatedness between the first endpoint and the second endpoint;
• and
• store an indication of the extent of relatedness on a computer-readable medium.

A computer-implemented method comprising:

• monitoring activity via a computer coupled to a communication network;
• generating a first ranked list of other endpoints with which a first endpoint has communicated via the communication network during a time interval;
• generating a second ranked list of other endpoints with which a second endpoint has communicated during the time interval;
• determining a similarity of the first ranked list to the second ranked list;
• determining an extent of relatedness of the first endpoint to the second endpoint based on the similarity;
• storing an indication of the extent of relatedness on a computer-readable medium;
• and
• outputting via an output device a report on extent of relatedness among selected endpoints.

A non-transitory computer-readable storage medium storing instructions which, when executed by one or more processors, cause the one or more processors to:

• generate a first ranked list of other endpoints with which a first endpoint has communicated via a communication network during a time interval;
• generate a second ranked list of other endpoints with which a second endpoint has communicated during the time interval;
• determine a similarity of the first ranked list to the second ranked list;
• determine an extent of relatedness of the first endpoint to the second endpoint based on the similarity;
• and
• store an indication of the extent of relatedness on a computer-readable medium.