CPC H04L 43/067 (2013.01) [H04L 41/064 (2013.01); H04L 43/045 (2013.01); H04L 43/16 (2013.01)] | 20 Claims |
1. A method comprising:
detecting, via a computer processor, an event that occurred in a computer network;
defining, via a data delimiter, a first period prior to the event and a second period posterior to the event, wherein a duration of the first period is determined based on a characteristic of the event; and
implementing, via the computer processor, an action in the computer network based on a comparison of first network data collected in the first period and second network data collected in the second period.
|