Patent ID: 11902308
Assignee: AT&T INTELLECTUAL PROPERTY I, L.P.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 17:
18. A device comprising:
a processing system including at least one processor; and
a non-transitory computer-readable medium storing instructions which, when executed by the processing system, cause the processing system to perform operations, the operations comprising:
constructing a sequence graph from a set of data containing information about activities in a telecommunications service provider network, where the sequence graph represents a subset of the activities that occurs as a sequence, wherein the sequence graph comprises a plurality of nodes and a plurality of edges, wherein each node of the plurality of nodes represents a state of an entity in the telecommunications service provider network at a given time, and wherein each edge of the plurality of edges represents a transition of the entity from one state to another state;
providing an embedding of the sequence graph as input to a machine learning model, wherein the machine learning model has been trained to detect when an input embedding of a sequence graph is likely to indicate a threat activity;
determining, based on an output of the machine learning model, the subset of the activities is indicative of the threat activity; and
initiating a remedial action to mitigate the threat activity.