Patent ID: 11936661
Assignee: KYNDRYL, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 12:
13. A computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions readable and executable by a computer to cause the computer to perform a method in a cloud-based implementation, comprising:
providing, as input data, information of a listing of potential beacon incidents as output data from a beaconing detector;
reformatting the input data into bipartite graph data in a format of source MAC (Media Access Control) address data versus destination IP (Internet Protocol) data and timestamp information;
providing the bipartite graph data as input data into a first processing to detect malicious beaconing activities using a lockstep detection module on the input bipartite graph data, as executed by a processor on a computer, to detect possible synchronized attacks against a targeted infrastructure; and
providing the bipartite graph data as input data into a second processing to provide community detection by a community detection module of the second processing for processing a community detection mechanism that evaluates a domain server churn by evaluating edge weights on co-occurrence graph data from a co-occurrence graph conversion module.