Patent ID: 9026841
Filing Date: 2015-05-05
Classification: G06F,H04L,H04W

Abstract:
1. A computer-implemented method for detecting suspicious network device activity, comprising: identifying, at a network device, a suspicious activity condition, wherein evaluation of the condition includes evaluating data corresponding to the network device; detecting, at the network device, activity of the network device, wherein detecting the activity includes detecting a power spike or above-threshold stimulus; receiving, at the network device and from each of one or more other network devices, a communication that includes data corresponding to the activity of the network device that indicates that the other network device did not detect the power spike or above-threshold stimulus, wherein the network device and the one or more other network devices are part of a same network; determining, at the network device, that the suspicious activity condition is satisfied based on the data corresponding to the network device received from each of the one or more other network devices and the detected activity; and in response to the determining that the suspicious activity condition is satisfied, changing a local operation of the network device.