Patent ID: 11916939
Assignee: ACER CYBER SECURITY INCORPORATED
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. An abnormal traffic detection method, comprising:
obtaining network traffic data of a target device;
sampling the network traffic data by a sampling window to obtain sampling data, wherein the sampling window has a time length;
generating an image according to the sampling data, wherein the image presents a traffic feature of the network traffic data corresponding to the time length, and the traffic feature presented by the image reflects a data transmission amount corresponding to a plurality of sampling points of the sampling data; and
performing an image analyzation on the image, by a deep learning model trained for image identification, to generate evaluation information corresponding to an abnormal traffic,
wherein the step of generating the image according to the sampling data comprises:
performing a normalization operation on the sampling data to adjust a total number of a plurality of sampling values corresponding to the sampling points, such that the adjusted total number of the sampling values meets a total number of a plurality of pixel positions along a first dimension in the image, wherein each of the sampling values reflects a data transmission amount corresponding to one of the sampling points; and
converting the sampling values to a plurality of pixel values corresponding to the pixel positions in the image.