Patent Document ID: 8997227
Application ID: 13406274
Patent Flag: 1

Claim One:
1. A method for generating attack packet signatures, the method comprising: by a signature generating system comprising computing hardware: determining baseline values for attributes of a second set of data packets captured during normal operations; obtaining data packets corresponding to a network attack on a target system; determining packet probabilities for the obtained data packets, wherein each packet probability indicates a probability that an individual data packet of the obtained data packets corresponds to a network attack, and wherein each packet probability is based at least partly on the determined baseline values for the attributes of the second set of data packets; designating at least a portion of the data packets as attack packets based at least partly on the determined packet probabilities that individual data packets of the obtained data packets correspond to a network attack; generating a training data set including the attack packets designated based at least partly on the determined probabilities; and generating a packet signature for attack packets based at least partly on the training data set including the attack packets designated based at least partly on the determined packet probabilities.