Machine learning assisted network detection and response
OwnerAnoop Kodakkal Valappil, Laxmikant Agarwal +3inventors
InventorsAnoop Kodakkal Valappil, Laxmikant Agarwal, Nishit Shantibhai Shah, Bobby Cheuk-Yuen Lam, Andrew J. Thomas
Life of this patent
Estimating the term…
Abstract
A method for responding to a threat includes receiving, by a firewall of a monitored network system, network traffic, providing, by the firewall, filtered metadata associated with a portion of the network traffic to a remote machine learning model for analysis, receiving, by the firewall, a response from the remote machine learning model based on the analysis, and enforcing, by the firewall, the response from the remote machine learning model on the received network traffic with an action.
Claims20
A method for responding to a threat comprising:
- receiving, by a firewall of a monitored network system, network traffic;
- providing, by the firewall, filtered metadata associated with a portion of the network traffic to a remote machine learning model for analysis;
- receiving, by the firewall, a response from the remote machine learning model based on the analysis;
- and
- enforcing, by the firewall, the response from the remote machine learning model on the received network traffic with an action.
A method for responding to a threat comprising:
- receiving, by a firewall of a monitored network system, network traffic;
- extracting, by the firewall, metadata associated with the network traffic;
- providing, by the firewall, the metadata associated with the network traffic to a machine learning model for the analysis;
- receiving, by the firewall, a response from the machine learning model based on the analysis;
- performing, by the firewall, one or more threat analyses on the network traffic asynchronously with the analysis by the remote machine learning model;
- and
- enforcing, by the firewall, the response from the remote machine learning model on the received network traffic with an action.
A firewall system, comprising:
- one or more processors;
- one or more computer readable storage media;
- and
- computer readable code stored collectively in the one or more computer readable storage media, with the computer readable code including data and instructions to cause the one or more computer processors to perform a method for responding to a threat comprising:
- receiving, by the firewall system, network traffic;
- providing, by the firewall system, filtered metadata associated with a portion of the network traffic to a remote machine learning model for analysis;
- receiving, by the firewall system, a response from the remote machine learning model based on the analysis;
- and
- enforcing, by the firewall, the response from the remote machine learning model on the received network traffic with an action.
Dependencies are inferred from the claim text.