Application Scenarios for Artificial Intelligence Engine
The network administrator of an enterprise campus network needs to learn the operations of the network and detect abnormal behaviors in a timely manner, if any. To achieve this, the network administrator usually uses the flow probe to collect information about the desired traffic on the traffic-traversing node (for example, the FW) and sends the collected information in metadata format to the AIE for analysis. The AIE then uses security detection algorithms based on machine learning and deep learning to analyze and evaluate the information in order to accurately identify threats (including attacks) on the network. Based on the analysis result, the AIE sends logs and generates reports for the network administrator's further processing. Figure 1 shows an application scenario of the AIE.
