Methods and apparatus to analyze telemetry data of a network device for malicious activity
AssigneeMcAfee, Inc.
InventorsTirumaleswar Reddy KONDA, Shashank JAIN, Abhishek TRIPATHI, Piyush Pramod JOSHI
Life of this patent
Estimating the term…
Abstract
Methods, apparatus, systems and articles of manufacture are disclosed to analyze telemetry data of a network device for malicious activity. An example apparatus includes an interface to obtain first telemetry data, a rules generator to, using the first telemetry data, generate a global block list using a machine learning model, the machine learning model generated based on a device specific block list and a device specific allow list, and a model manager to transmit the global block list to a gateway, the gateway to facilitate on-path classification of second telemetry data.
Claims22
An apparatus comprising:
- an interface to obtain first telemetry data;
- a rules generator to, using the first telemetry data, generate a global block list using a machine learning model, the machine learning model generated based on a device specific block list and a device specific allow list;
- and
- a model manager to transmit the global block list to a gateway, the gateway to facilitate on-path classification of second telemetry data.
A non-transitory computer readable storage medium comprising instructions which, when executed, cause at least one processor to at least:
- obtain first telemetry data;
- generate a global block list using the machine learning model, the machine learning model based on a device specific block list and a device specific allow list;
- and
- transmit the global block list to a gateway, the gateway to facilitate on-path classification of second telemetry data.
A method comprising:
- obtaining first telemetry data;
- generating a global block list using a machine learning model, the machine learning model based on a device specific block list and a device specific allow list;
- and
- transmitting the global block list to a gateway, the gateway to facilitate on-path classification of second telemetry data.
22-56. (canceled)
Dependencies are inferred from the claim text.