Patent ID: 9621431
Date: 2017-04-11
CPC Classifications: H04L

Claim:
1. A method comprising: monitoring network activity in a computer network; discovering endpoints of unknown endpoint types in the computer network based on the monitored network activity, wherein the discovered endpoints comprise physical, logical, and virtual entities that communicate over the computer network; utilizing a first set of classification models to identify an endpoint type of each of the discovered endpoints based on the monitored network activity, wherein the first set of classification models comprises classification models that are configured to learn to identify unknown endpoint types in the computer network using the monitored network activity in the computer network; monitoring communication patterns between different endpoints of known types operating in the computer network, wherein the different endpoints of known types comprise the endpoints with identified endpoint types; and utilizing a second set of classification models to determine a logical topology of the computer network based on the monitored communication patterns, wherein the logical topology represents physical, logical, and virtual connections between the different endpoints of known types operating in the computer network; wherein the monitoring, discovering, and utilizing steps are performed by at least one processing device comprising a processor coupled to a memory.