US 11,943,246 B2
Reconstructing network activity from sampled network data using archetypal analysis
Omer Karin, Tel Aviv (IL)
Assigned to MICROSOFT TECHNOLOGY LICENSING, LLC, Redmond, WA (US)
Filed by Microsoft Technology Licensing, LLC, Redmond, WA (US)
Filed on May 6, 2022, as Appl. No. 17/738,356.
Application 17/738,356 is a continuation of application No. 16/295,957, filed on Mar. 7, 2019, granted, now 11,356,466.
Prior Publication US 2022/0263848 A1, Aug. 18, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); G06F 17/16 (2006.01); G06F 21/55 (2013.01); G06N 20/00 (2019.01); H04L 43/026 (2022.01); H04L 43/04 (2022.01); H04L 43/062 (2022.01); H04L 43/0876 (2022.01)
CPC H04L 63/1425 (2013.01) [G06F 17/16 (2013.01); G06N 20/00 (2019.01); H04L 43/026 (2013.01); H04L 43/04 (2013.01); H04L 43/062 (2013.01); H04L 43/0876 (2013.01); H04L 63/1458 (2013.01); H04L 63/1466 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system for reconstructing network activity, the system comprising:
one or more processors; and
one or more memory devices that store program code configured to be executed by the one or more processors, the program code comprising:
a network activity monitor configured to monitor network activity of a plurality of network entities;
a feature determiner configured to obtain a set of features for each network entity in the plurality of network entities based on the monitoring;
a vertex determiner configured to determine a number of vertices to describe the sets of features in a multidimensional space;
a usage pattern assignor configured to assign a different usage pattern to each of the vertices, wherein the usage pattern assignor automatically assigns the different usage patterns to the vertices or assigns the different usage patterns to the vertices based on a user input; and
a network activity reconstructor configured to obtain at least a subset of the features in the set of features for a particular network entity, and to represent the particular network entity based at least on the usage patterns and the subset of the features in the set of features for the particular network entity.