| CPC G06Q 30/0201 (2013.01) [G06F 9/547 (2013.01); H04L 43/04 (2013.01); H04L 67/535 (2022.05)] | 17 Claims |

|
1. A method comprising:
obtaining network traffic data for a period of time, the network traffic data including a plurality of host calls;
determining a host call sequence from the plurality of host calls, the host call sequence including one or more of the plurality of host calls;
obtaining an augmented dataset, the augmented dataset being based on a baseline dataset generated via a process of fingerprinting;
identifying an application corresponding to the host call sequence based on the augmented dataset; and
determining a number of users of the application for the period of time based on a number of times the host call sequence repeats in the network traffic data.
|