Patent ID: 11930039
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A computer-implemented method of metric space modeling of network communication, the method comprising:
receiving input data representing network interactions between a plurality of source entities and a plurality of destination entities over a first time period;
determining, for a first source entity of the plurality of source entities, a first feature vector, the first feature vector comprising a plurality of elements, wherein each element of the plurality of elements is associated with a respective destination entity of the plurality of destination entities, and wherein a value of each of the elements represents respective metric values describing network communication between the first source entity and the respective destination entity;
inputting a plurality of feature vectors into a clustering algorithm, the plurality of feature vectors including the first feature vector, wherein each feature vector of the plurality of feature vectors represents network interactions of one of the plurality of source entities;
generating, using the clustering algorithm, a first number of clusters of the plurality of feature vectors;
determining that the first feature vector is not included in any clusters of the first number of clusters; and
classifying the first source entity as an anomalous network entity based at least in part on the first feature vector being an outlier with respect to the first number of clusters.