Patent ID: 11930039
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 3:
4. A method comprising:
receiving first data describing network communication between a plurality of source entities and a plurality of destination entities;
generating, for each source entity of the plurality of source entities, respective feature data representing network communication between the respective source entity and one or more of the plurality of destination entities, the respective feature data representing network communication for the respective source entity over a first time period;
determining, using an unsupervised machine learning model, a first number of clusters of the feature data;
determining, based at least in part on the first number of clusters, a first source entity associated with feature data that is not included in a cluster of the first number of clusters; and
classifying the first source entity as an anomalous entity.