	US 12,189,673 B2
	Techniques for securing computing interfaces using clustering
Adi Chen Arbib, Netanya (IL); Adi Vardi, Tel Aviv (IL); Shai Meir, Tzur Yitzhak (IL); Yaniv Gabay, Tel Aviv (IL); Yuval Alkalai Tavori, Ramat Gan (IL); Idan Tager, Givatayim (IL); and Itzhak Gershfeld, Rishon le Zion (IL)
Assigned to Noname Gate Ltd., Tel Aviv (IL)
Filed by Noname Gate Ltd., Tel Aviv-Jaffa (IL)
Filed on Apr. 10, 2023, as Appl. No. 18/297,789.
Prior Publication US 2024/0338400 A1, Oct. 10, 2024
Int. Cl. G06F 16/35 (2019.01)

CPC G06F 16/355 (2019.01)

13 Claims

1. A method for clustering computing interface calls, comprising:

determining a plurality of computing interface cluster definitions, the plurality of computing interface cluster definitions including a plurality of parameter type strings;

wherein determining the plurality of computing interface cluster definitions further comprises:

identifying a plurality of clusterizers in a plurality of segments of a plurality of computing interface examples, wherein each clusterizer is at least a portion of a string which demonstrates a recurring pattern within the plurality of computing interface examples; and

matching clusterized string lists between segments of the plurality of segments, wherein each clusterized string list is an ordered list of clusterizers in one of the plurality of segments, wherein the plurality of cluster definitions are determined based on the matching;

determining whether a set of clusterizers in each computing interface example is a cluster based on whether each of the clusterizers in the set of clusterizers in each computing interface example meets at least one minimum count condition;

replacing each clusterizer that fails to meet the at least one minimum count condition with a corresponding portion of a clusterized string list in order to create a replaced segment pattern; and

clustering a plurality of computing interface call instances into a plurality of clusters based on the plurality of computing interface cluster definitions, wherein a number of clusters among the plurality of clusters is fewer than a number of computing interface call instances among the plurality of computing interface call instances, wherein clustering the plurality of computing interface call instances includes determining a plurality of portions of the plurality of computing interface call instances which match types of parameters represented by respective parameter type strings of the plurality of parameter type strings, wherein each replaced segment pattern is determined as one of the plurality of computing interface cluster definitions.