Patent ID: 11916939
Assignee: ACER CYBER SECURITY INCORPORATED
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 7:
8. An abnormal traffic detection device, comprising:
a storage device, storing network traffic data of a target device; and
a processor, coupled to the storage device,
wherein the processor samples the network traffic data by a sampling window to obtain sampling data, the sampling data has a time length, and
the processor generates an image according to the sampling data, wherein the image presents a traffic feature of the network traffic data corresponding to the time length, and the traffic feature presented by the image reflects a data transmission amount corresponding to a plurality of sampling points of the sampling data, and
the processor performs an image analyzation on the image, by a deep learning model trained for image identification, to generate evaluation information corresponding to an abnormal traffic,
wherein the operation of generating the image according to the sampling data comprises:
performing a normalization operation on the sampling data to adjust a total number of a plurality of sampling values corresponding to the sampling points, such that the adjusted total number of the sampling values meets a total number of a plurality of pixel positions along a first dimension in the image, wherein each of the sampling values reflects a data transmission amount corresponding to one of the sampling points; and
converting the sampling values to a plurality of pixel values corresponding to the pixel positions in the image.