Detecting anomalous traffic
US20220159022A1 Patents
A method includes acquiring first aggregate event data for a first sub -publisher. The first aggregate event data indicates aggregate user activity across a plurality of applications associated with the first sub -publisher. The method further includes acquiring second aggregate event data for plu rality of additional sub -publishers. The method further includes determining a plurality of anomaly metric values for the first sub -publisher based on the first aggregate event data and the second aggregate event data . The method further includes determining an anomaly function value for the first
20 claims. 120,742 characters of text.