Patent ID: 11956265
Assignee: BITSIGHT TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A method for inferring a relationship between two entities, the method comprising the steps of:
receiving at a server, from a network device, composite flow information corresponding to a plurality of flows, wherein each individual flow information comprises a source network identifier and a destination network identifier;
determining that for a subset of the plurality of flows: (i) the source network identifier in each flow in the subset belongs to a first set of network identifiers, each of which being associated with a first entity, and (ii) the destination network identifier in each flow in the subset belongs to a second set of network identifiers, each of which being associated with a second entity; and
determining that a relationship exists between the first entity and the second entity based on (i) a port associated with the flows in the subset and (ii) a determination that a frequency of the flows in the subset is at least equal to a specified flow-frequency threshold,
wherein the flow-frequency threshold is based on a size of the first entity.