CLASSIFICATION OF DETECTED NETWORK ANOMALIES USING ADDITIONAL DATA

摘要

A network anomaly detector detects a network anomaly by monitoring a communication network and provides an indication of the detected network anomaly to a network anomaly analyzer. The network anomaly analyzer receives the indication of the detected network anomaly and, on the basis of data representing the detected network anomaly and additional data, e.g., from outside the communication network, performs classification of the detected network anomaly. Depending on the classification of the detected network anomaly, the network anomaly analyzer provides a report of the detected network anomaly to another node. If for example the detected network anomaly is classified as expected behavior, reporting of the detected network anomaly may be suppressed.

主权项

1. A method for analyzing network anomalies in a communication network, the method comprising:
receiving an indication of a network anomaly which was detected by monitoring the communication network; on the basis of data representing the detected network anomaly and on the basis of additional data, performing classification of the detected network anomaly; and depending on the classification of the detected network anomaly, providing a report of the detected network anomaly.