06708212 is referenced by 142 patents and cites 7 patents.

A method of network surveillance includes receiving network packets handled by a network entity and building at least one long-term and a least one short-term statistical profile from a measure of the network packets that monitors data transfers, errors, or network connections. A comparison of the statistical profiles is used to determine whether the difference between the statistical profiles indicates suspicious network activity.

Title
Network surveillance
Application Number
10/429607
Publication Number
6708212 (B2)
Application Date
May 5, 2003
Publication Date
March 16, 2004
Inventor
Alfonso Valdes
San Carlos
CA, US
Phillip Andrew Porras
Cupertino
CA, US
Agent
Moser Patterson & Sheridan
US
Agent
Kin Wah Tong
US
Assignee
SRI International
CA, US
IPC
G06F 11/30
View Original Source