Patent ID: 11888878
Assignee: NOKIA TECHNOLOGIES OY
Field: Digital communication (Electrical engineering)
Classification: CPC H  Y | IPC H

Claim 6:
7. A communications controller (“controller”) comprising:
at least one processor; and
at least one memory including computer program code;
wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the controller to at least:
receive, from each communication network edge device in a set of communication network edge devices (‘edge devices’), a respective set of network traffic information comprising a first traffic record indicative of respective measures of request packets exiting the communication network via the respective edge device for respective data flows and a second traffic record indicative of respective measures of response packets entering the communication network via the respective edge device for respective data flows, wherein the first traffic record comprises a first reversible sketch and the second traffic record comprises a second reversible sketch; and
determine, based on the sets of network traffic information of the edge devices, whether a traffic anomaly indicative of an attack on the communication network is detected.