Patent ID: 8817655

Claim:
A method performed by a computer for creating multiple packet traffic clustering models and multiple packet traffic classification models, comprising: processing multiple known packet traffic flows to determine for each known packet traffic flow multiple traffic flow descriptors describing physical parameters of the known packet traffic flow and at least one traffic flow label describing a type of packet traffic flow; selecting a subset of the traffic flow descriptors as traffic flow features for each of the known packet traffic flows; associating each of the known packet traffic flows with corresponding selected traffic flow features; using computer-implemented unsupervised learning to define traffic flow clustering models by processing the traffic flow features associated with each of the known packet traffic flows; using computer-implemented supervised learning to create traffic classification models based on the defined traffic flow clustering models, the traffic flow features, and the traffic flow label associated with each of the known packet traffic flows; and storing the traffic clustering models and the traffic classification models in memory.