Patent ID: 11924048
Assignee: BRITISH TELECOMMUNICATIONS PUBLIC LIMITED COMPANY
Field: Audio-visual technology (Electrical engineering)
Classification: CPC H  G  Y | IPC G  H

Claim 0:
1. A method of anomaly detection for network traffic communicated by devices via a computer network, the method comprising:
clustering a set of time series, each time series including a plurality of time windows of data corresponding to network communication characteristics for a device and each cluster being defined based on an autoencoder for each cluster converting each time series to a vector of features for the time series and a clustering algorithm clustering the vectors;
training the autoencoder for each cluster based on a time series in the cluster;
generating, for the autoencoder of each cluster, a set of reconstruction errors for the autoencoder based on testing the autoencoder with data from time windows of at least a subset of the time series from which the autoencoder was trained;
generating a probabilistic model of reconstruction errors for each autoencoder; and
generating an aggregation of the probabilistic model for, in use, detecting reconstruction errors for a time series of data corresponding to network communication characteristics for a device as anomalous.