Patent ID: 9491070
Filing Date: 2016-11-08
CPC Classification: G06F,H04L

Claim Text:
1. A machine, comprising: a processor; and a memory connected to the processor, the memory storing instructions executed by the processor to: collect packet based network traffic timing data into an array; form a histogram by binning the array into individual bins representing units of time; produce a Fourier signature from the packet based network traffic timing data, wherein the instructions to produce include instructions to use each bin as a binary amplitude signal measurement that is Fourier transformed; associate the Fourier signature with a known pattern associated with a dangerous application or user; add the Fourier signature to a Fourier signature library comprising previously produced Fourier signatures associated with dangerous applications or users; collect new packet based network traffic timing data into a new array; form a histogram by binning the new array into individual bins representing units of time; produce a new Fourier signature from the new packet based network traffic timing data, wherein the instructions to produce include instructions to use each bin as a binary amplitude signal measurement that is Fourier transformed; compare the new Fourier signature with the Fourier signature of the Fourier signature library to selectively identify a Fourier signature match; associate the new network traffic data with the known pattern upon the Fourier signature match: and take computer security prophylactic actions against the dangerous application or user in response to the Fourier signature match.