Patent ID: 9578051
Date: 2017-02-21
CPC Classifications: H04L

Claim:
1. A method for identifying a threatening network, the method being implemented by a computer system and comprising: providing a dataset comprising network transaction data of a plurality of networks; performing an AT-SIG algorithm on the dataset; and displaying a graphic output of the AT-SIG algorithm for each of the plurality of networks, wherein the AT-SIG algorithm comprises providing a network movement before/after algorithm that provides a graphical plot of changes in network transaction activity from before to after a specified time, wherein the network movement before/after algorithm, after accepting the specified time, accepting a selection of one or more metrics of interest, and accepting a selection of a time interval duration, performs the steps of: wherein the network movement before/after algorithm generates a set of samples of metrics of interest for each network before the specified time and a set of samples of metrics of interest for each network after the specified time; wherein the AT-SIG algorithm further comprises one or more of the following: