Patent ID: 11956265
Assignee: BITSIGHT TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 6:
7. A system for inferring a relationship between two entities, comprising:
a processor;
a network port in communication with the processor and adapted to receive composite flow information corresponding to a plurality of flows; and
a memory coupled to the processor and comprising instructions, which when executed by the processor, program the processor to:
receive from a network device, the composite flow information corresponding to the plurality of flows, wherein each individual flow information comprises a source network identifier and a destination network identifier;
determine that for a subset of the plurality of flows: (i) the source network identifier in each flow in the subset belongs to a first set of network identifiers, each of which being associated with a first entity, and (ii) the destination network identifier in each flow in the subset belongs to a second set of network identifiers, each of which being associated with a second entity; and
determine that a relationship exists between the first entity and the second entity based on (i) a port associated with the flows in the subset and (ii) a determination that a frequency of the flows in the subset is at least equal to a specified flow-frequency threshold, wherein the flow-frequency threshold is based on a size of the first entity.