Patent ID: 11924316
Assignee: OPSWAT INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 13:
14. An apparatus, comprising:
an input port;
an output port;
a processor; and
a memory operably coupled to the processor and storing instructions to cause the processor to:
receive, via the input port, network traffic data including a plurality of data packets;
store a representation of each data packet from the plurality of data packets in a data store, to produce a set of training data;
detect a plurality of communication protocols associated with the set of training data;
determine a set of rules based on the plurality of communication protocols, wherein the set of rules includes domain-specific information associated with each communication protocol detected;
restructure training data from the set of training data according to the set of rules based on the detected plurality of communication protocols, to produce processed data;
store the processed data as non-malicious data; and
transmit, via the output port, the network traffic data.