Patent ID: 11870790
Assignee: CHARTER COMMUNICATIONS OPERATING, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method comprising:
with at least one processor in a network, obtaining information regarding network traffic flows, the obtained information comprising traffic pattern information and packet destination information;
with the at least one processor in the network, generating a classification model based on the obtained traffic pattern information and packet destination information, the classification model comprising one or more classification rules for classifying network traffic as normal or anomalous, wherein the traffic pattern information used to generate the one or more classification rules of the classification model comprises atypical volumes of data to destinations outside of a given geographic area of a computer;
with the at least one processor in the network, classifying the network traffic as anomalous or normal based on the generated classification model; and
with the at least one processor in the network, initiating at least one mitigation action based on the network traffic being classified as anomalous.