Patent ID: 11882138
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 18:
19. A network threat detection system, comprising:
a first software-based utility executed on hardware and configured to obtain a packet capture and generate a first network spectral encoding, the first network spectral encoding including a set of interval-bound traffic measurements for each pairing of one or more addressable network interfaces in the packet capture, together with any other detectable session data; and
a second software-based utility executed on hardware and configured to receive a data stream, and, as the data stream is received, to real-time pattern match a network spectral encoding of the received data stream against a set of network spectral encodings that include the first network spectral encoding; and
a third software-based utility executed on hardware and configured to respond to a pattern match between the network spectral encoding of the received data stream and a given one of the set of network spectral encodings to take a given mitigation or remediation action.