Loading patent…
AssigneeNEC Laboratories America, Inc.
InventorsJingchao Ni, Haifeng Chen, Bo Zong, LuAn Tang, Wei Cheng
Estimating the term…
Methods and systems for detecting and responding to anomalous nodes in a network include inferring temporal factors, using a computer-implemented neural network, that represent changes in a network graph across time steps, with a temporal factor for each time step depending on a temporal factor for a previous time step. An invariant factor is inferred that represents information about the network graph that does not change across the time steps. The temporal factors and the invariant factor are combined into a combined temporal-invariant representation. It is determined that an unlabeled node is anomalous, based on the combined temporal-invariant representation. A security action is performed responsive to the determination that unlabeled node is anomalous.
A method for detecting and responding to anomalous nodes in a network, comprising:
The method of claim 10, wherein the security action is selected from the group consisting of shutting down devices, stopping or restricting a type of network communication, enabling or disabling a connection between two devices, raising an alert to a system administrator, and changing a security policy level.
A system for detecting and responding to anomalous nodes in a network, comprising:
Dependencies are inferred from the claim text.