06711615 is referenced by 131 patents and cites 7 patents.

A method of network surveillance includes receiving network packets handled by a network entity and building at least one long-term and a least one short-term statistical profile from a measure of the network packets that monitors data transfers, errors, or network connections. A comparison of the statistical profiles is used to determine whether the difference between the statistical profiles indicates suspicious network activity.

Title
Network surveillance
Application Number
10/254457
Publication Number
6711615 (B2)
Application Date
September 25, 2002
Publication Date
March 23, 2004
Inventor
Alfonso Valdes
San Carlos
CA, US
Phillip Andrew Porras
Moutain View
CA, US
Agent
Moser Patterson & Sheridan
US
Agent
Kin Wah Tong Esq
US
Assignee
SRI International
CA, US
IPC
G06F 11/30
View Original Source