Patent ID: 9444701
Filing Date: 2016-09-13
CPC Classification: H04L

Claim Text:
1. A method comprising: by a processing unit: monitoring network communications to detect a plurality of data packets that were generated by a remote machine; reading the contents of each data packet of said plurality of data packets so as to extract a packet signature of each data packet; comparing each packet signature with at least one signature of a database of signatures in order to determine a similarity between each packet signature and said at least one signature; for a first candidate operating system, calculating a first confidence level and a second confidence level based on the determined similarities, and calculating a first overall confidence level by averaging the first and the second confidence levels; for a second candidate operating system, calculating a third confidence level and a fourth confidence level based on the determined similarities, and calculating a second overall confidence level by averaging the third and the fourth confidence levels; and selecting the first candidate operating system as the operating system of the remote machine based on the first and the second overall confidence levels.