Patent ID: 11936545
Assignee: SPLUNK INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC G  H

Claim 0:
1. A computerized method comprising:
obtaining network traffic data exchanged between a source device and a destination device;
performing a regularity assessment of a first metric of the network traffic data across a set of communication sessions of the source device and the destination device over a given time period by:
determining an average of the first metric for individual communication sessions of the set of communication sessions resulting in a set of averages of the first metric,
establishing an upper bound and a lower bound for the set of averages of the first metric over the given time period,
determining a difference between the upper bound and the lower bound, and
comparing the difference between the upper bound and the lower bound to a mean of the set of averages of the first metric for the individual communication sessions of the set of communication sessions over the given time period; and

determining whether beaconing transmissions are present within the network traffic data based on the regularity assessment of the first metric.