Patent ID: 11924316
Assignee: OPSWAT INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 6:
7. A method, comprising:
receiving first network traffic data including a plurality of data packets;
storing a representation of each data packet from the plurality of data packets in a first data store, to produce a set of training data;
detecting a plurality of communication protocols associated with the set of training data;
determining a set of rules based on the plurality of communication protocols, wherein the set of rules includes domain-specific information associated with each communication protocol detected;
restructuring training data from the set of training data according to the set of rules based on the detected plurality of communication protocols, to produce processed data;
generating a security policy based on the processed data;
transmitting, via an output port, the first network traffic data;
receiving second network traffic data including the plurality of data packets;
analyzing the second network traffic data based on the security policy to determine a maliciousness of the second network traffic data; and
sending a signal to trigger a remediation action based on the determined maliciousness of the second network traffic data.