×

Methods, systems, and computer program products for detecting communication anomalies in a network based on overlap between sets of users communicating with entities in the network

  • US 9,203,856 B2
  • Filed: 03/04/2013
  • Issued: 12/01/2015
  • Est. Priority Date: 03/04/2013
  • Status: Expired due to Fees
First Claim
Patent Images

1. A method, comprising:

  • detecting communication between a plurality of entities and a set of users in the network;

    matching short messaging service data and internet protocol data from the communication with the users in the set of users;

    determining an overlap between subsets of the set of users that the entities comprising the plurality of entities communicated with, respectively, wherein the overlap is determined based on the matching;

    determining a similarity metric between pairs of the entities comprising the plurality of entities based on the overlap of the subsets of the set of users for each of the pairs, respectively;

    determining whether the communication between the plurality of entities and the set of users is anomalous based on the overlap; and

    identifying a cluster of the entities comprising the plurality of entities based on the overlap and the similarity metric;

    wherein the plurality of entities comprises domain names;

    wherein determining whether the communication between the plurality of entities and the set of users is anomalous comprises;

    determining whether the communication associated with the cluster of the entities is anomalous based on a number of internet protocol addresses each respective one of the domain names in the cluster of the entities resolves to over a time period;

    determining whether the communication associated with the cluster of the entities is anomalous based on operating system types of devices the set of users use to communicate with the entities comprising the cluster; and

    determining whether the communication associated with the cluster of the entities is anomalous based on the cluster of entities comprising prepaid phone numbers.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×