Patent ID: 11936690
Assignee: CISCO TECHNOLOGY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A method comprising:
collecting, by an electronic device, first data with respect to first network traffic in a computer network, wherein the first data is related to network connections and comprises (i) fingerprint strings and (ii) one or more of source information or destination information related to the fingerprint strings;
annotating, by the electronic device, each cluster of a plurality of clusters with an identification based at least in part on context information, wherein the clusters correspond to unique fingerprint strings and are based at least in part on the one or more of source information or destination information, wherein the context information pertains to contexts of a plurality of processes related to the first network traffic, and wherein each identification relates to identifications of the processes of the plurality of processes;
entering, by the electronic device, the clusters into a database as corresponding entries in the database;
comparing, by the electronic device, second data with one or more entries in the database, wherein the second data is related to second network traffic in the computer network; and
identifying, by the electronic device, a process of the plurality of processes as having initiated the second network traffic.