US 11,956,252 B2
Techniques for resolving contradictory device profiling data
Shaked Gitelman, Tel Aviv (IL); and Adi Krespil-Lo, Tel Aviv (IL)
Assigned to ARMIS SECURITY LTD., Tel Aviv-Jaffa (IL)
Filed by Armis Security Ltd., Tel Aviv-Jaffa (IL)
Filed on Dec. 16, 2019, as Appl. No. 16/715,464.
Prior Publication US 2021/0185058 A1, Jun. 17, 2021
Int. Cl. H04L 29/06 (2006.01); H04L 9/40 (2022.01); H04L 67/303 (2022.01)
CPC H04L 63/1416 (2013.01) [H04L 63/102 (2013.01); H04L 67/303 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method for resolving contradictory device profiling data, comprising:
determining at least one set of non-contradicting values and at least one set of contradicting values in device profiling data related to a device based on a plurality of conflict rules, wherein each set of non-contradicting values and each set of contradicting values is a plurality of values of the device profiling data;
merging values of each of the at least one set of non-contradicting values in device profiling data into at least one first value;
selecting at least one second value from the at least one set of contradicting values, wherein selecting one of the at least one second value from each set of contradicting values further comprises generating a plurality of certainty scores, wherein each certainty score corresponds to a value of the at least one set of contradicting values, wherein each certainty score indicates a likelihood that the corresponding value is accurate, wherein the at least one second value is selected based on the plurality of certainty scores, wherein the at least one second value is selected based further on at least one known device profile, wherein selecting the at least one second value further comprises comparing at least one combination of values of the device profiling data to each of the at least one known device profile, the at least one combination of values comprising the at least one first value and at least one contradicting value of the at least one set of contradicting values; and
creating a device profile for the device based on the at least one first value and the at least one second value.