Patent ID: 11888882
Assignee: BANK OF AMERICA CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 13:
14. One or more non-transitory computer-readable media storing instructions that, when executed by a host computing device comprising a processor, memory, and a communication interface, cause the host computing device to:
aggregate, by a network traffic correlation engine, network communications information from a plurality of hosts on an enterprise network, wherein the network communications information comprises inbound and outbound connection information associated with each host on the enterprise network;
identify, by the network traffic correlation engine, whether a correlation exists between a first outbound communication sent from a first host device and a second inbound communication received by a second host device; and
trigger, based on the correlation, an alert identifying that an anomalous communication condition is present between the first host device and the second host device, wherein the anomalous communication condition comprises an indication of host to host communication.