Web-Enhanced Network Entity Classification for Sparse Traffic Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network security systems struggle to accurately classify devices with incomplete or low-quality data, particularly for less common entities from smaller vendors, leading to poor prediction accuracy and difficulty in applying appropriate security measures.
Innovation Solution
Utilize external data from the Internet, such as webpages, to complement network data and improve classification accuracy by bridging the data quality gap, using web crawlers to gather information and enhance machine learning models with domain-specific knowledge.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If traditional printing methods are used, then production cost is reduced, but production speed is slow and cannot meet urgent market demands
Solution Approach 1:
The printing system is divided into multiple independent print heads (first print head, second print head, etc.) that can operate simultaneously on different sections of the substrate. Each print head contains multiple nozzles that work in parallel, effectively segmenting the printing process to increase overall production speed while maintaining cost-effectiveness through modular architecture
Solution Approach 2:
The patent transitions from traditional single-direction sequential printing to multi-directional parallel printing by arranging multiple print heads in different spatial positions. The print heads can print simultaneously on different areas of the substrate, adding a spatial dimension to the printing process and dramatically increasing throughput
2Productivity
If multiple print heads are added to increase production speed, then productivity improves, but device complexity increases
Solution Approach 1:
Multiple print heads are merged into a single integrated printing system that shares common support structures, control mechanisms, and substrate handling components. The print heads are arranged in a coordinated manner where they work together as one unified system rather than independent units, reducing overall device complexity while maintaining high productivity
Solution Approach 2:
The printing system is designed with universal components that serve multiple functions. The support structure accommodates multiple print heads, the substrate handling mechanism serves all print heads, and the control system manages the entire array. This multi-functionality reduces the need for separate dedicated components for each print head, thereby reducing device complexity
3Productivity
If ink is deposited too quickly to meet production demands, then productivity increases, but ink penetration becomes insufficient and quality deteriorates
Solution Approach 1:
The ink deposition process is segmented into multiple sequential printing passes by different print heads. Instead of one head depositing all ink rapidly, multiple heads deposit ink in stages, allowing the substrate to absorb ink progressively. This segmented approach maintains high overall productivity while ensuring adequate penetration quality at each deposition stage
Solution Approach 2:
The printing process uses periodic action where ink is deposited in multiple cycles or passes rather than continuously. Each print head deposits ink in controlled intervals, allowing absorption time between deposits. This periodic deposition pattern ensures that ink penetrates properly while maintaining high production throughput through the coordinated operation of multiple heads
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems, methods, and related technologies for classification are described. Network traffic from a network may be accessed and an entity may be selected. One or more values associated with one or more properties associated with the entity may be determined. The one or more values may be accessed from the network traffic. A search query based on the one or more values associated with the one or more properties associated with the entity is determined and performed. A search query result is received and the search query result comprises a plurality of webpages. Data from a webpage of the plurality webpages is accessed. A classification result of the entity is determined, by a processing device, based on the data from the webpage of the plurality of webpages. The classification result is stored.