Patent ID: 11902311
Assignee: RIBBON COMMUNICATIONS OPERATING COMPANY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 10:
11. A method of operating a communication system comprising:
processing, at a first node executing an application for threat detection and mitigation, a first set of traffic data including information about system traffic corresponding to a first time period, one or more pieces of data in said first set of traffic data being provided by sensors or sensor enforcer nodes monitoring traffic;
detecting, based on the first set of traffic data, a first set of traffic instances which are found to be a first threat of a first type;
notifying an operator of the first threat of the first type;
monitoring to detect a response from the operator indicating an action to be taken in the system in response to the first threat of the first type; and
in response to detecting an operator indicated action to be taken in response to the first threat of the first type, implementing said action;
in response to failing to detect an operator indicated action to be taken in response to the first threat of the first type within a predetermined time, continuing system operation without taking an action in response to the first threat of the first type;
storing information about the first threat of the first type and any action taken in response to the first threat of the first type;
wherein the first set of traffic data includes Real-time Transport Protocol (RTP) application meta-data, raw RTP data Real-time Transport Control Protocol (RTCP) application meta-data, and raw RTCP data;
wherein the first set of traffic instances are detected based on automated analysis of the RTP application meta-data, the raw RTP data, the RTCP application meta-data, and the raw RTCP data;
wherein the first set of traffic instances contains a set of characteristics or patterns that match a set of characteristics or patterns which is indicative of a threat of the first type.