A method and system for configuring a behavioral network intelligence system using a network monitoring programming language are provided. The method includes defining at least one target of a traffic segment to be monitored using at least one application path attribute of an application, wherein the application is accessed via at least one user device connected to a network, wherein the at least one application path attribute is defined respective of an application path keyword and an application path assessment keyword; and defining at least one condition representing the behavior of the at least one application path attribute of the application, the at least one target and the at least one condition can be interpreted by a monitoring system to allow for determining a behavioral impact of the application on the network.
Please help me write a proper abstract based on the patent claims. CLAIM: 1. A method for configuring a behavioral network intelligence system using a network monitoring programming language, comprising: defining at least one target of a traffic segment to be monitored using at least one application path attribute of an application, wherein the application is accessed via at least one user device connected to a network, wherein the at least one application path attribute is defined respective of an application path keyword and an application path assessment keyword; and defining at least one condition representing the behavior of the at least one application path attribute of the application, wherein the at least one condition is defined using a plurality of terms and Boolean expressions, each of the plurality of terms is defined respective of a behavior keyword and a behavior keyword assessment; wherein the at least one target and the at least one condition can be interpreted by a monitoring system to allow for determining a behavioral impact of the application on the network carrier. 2. The method of claim of 1, wherein the at least one application path attribute and the at least one condition comply with a syntax of the network monitoring programming language. 3. The method of claim 2, wherein the behavior keyword, the behavior keyword assessment, the application path keyword, and the application path assessment keyword are defined by the syntax of the network monitoring programming language. 4. The method of claim 2, wherein the behavior keyword assessment is any one of: high, low, and normal. 5. The method of claim 2, wherein the application path keyword assessment is any one of: a specific number, a specific label, a list of numbers, a list of labels, ‘all’, and ‘any’. 6. The method of claim 2, wherein the application path keyword relates to an application path attribute including any one of: an application name, a device type, an operating system type, an operating system version, a geographical location, a browser type, an application type, and an application version. 7. The method of claim 2, wherein the behavior keyword relates to a behavioral parameter including any one of: a packet rate, a byte rate, a data direction, a plurality of new connections per second (CPS), a concurrent number of connections per application (CUC), a connection duration, and a transport protocol state. 8. The method of claim 1, further comprising: parsing the at least one target and the at least one condition to generate a list of entities and a list of inference modules; and evaluating using the list of inference modules at least a degree of fulfillment (DoF), wherein the DoF defines a behavior group that the plurality of terms satisfy with respect to the at least one target. 9. The method of claim 8, wherein evaluating the at least a DoF further comprises: for each of the plurality terms: sampling, at predefined time intervals, data of behavioral parameters related to behavior keywords defined in the term; computing behavioral scores using the sampled data and the behavior keyword assessment; and correlating the computed behavioral scores using the plurality of terms and Boolean expressions to generate the at least one DoF. 10. The method of claim 8, wherein the behavior group defines any one of: variance of chatty activity, variance of malware activity, and variance of scanning activity. 11. The method of claim 1, wherein the at least one condition is dynamically changed. 12. The method of claim 1, wherein the network monitoring programming language is a human linguistics programming language. 13. The method of claim 1, wherein the device a central controller of a software defined network (SDN), wherein the SDN further comprises a plurality of network elements, and wherein the SDN is part of an infrastructure of a network carrier. 14. A non-transitory computer readable medium having stored thereon instructions for causing one or more processing units to execute the method according to claim 1. 15. A system for determining the behavioral impact of applications on a network, comprising: a processor; and a memory communicatively connected to the processor, the memory containing a plurality of instructions that, when executed by the processor, configure the system to: define at least one target of a traffic segment to be monitored using at least one application path attribute of an application, wherein the application is accessed via at least one user device connected to a network, wherein the at least one application path attribute is defined respective of an application path keyword and an application path assessment keyword; and define at least one condition representing the behavior of the at least one application path attribute of the application, wherein the at least one condition is defined using a plurality of terms and Boolean expressions, each of the plurality of terms is defined respective of a behavior keyword and a behavior keyword assessment; wherein the at least one target and the at least one condition can be interpreted by a monitoring system to allow for determining a behavioral impact of the application on the network. 16. The system of claim of 15, wherein the at least one application path attribute and the at least one condition comply with a syntax of the network monitoring programming language. 17. The system of claim 16, wherein the behavior keyword, the behavior keyword assessment, the application path keyword, and the application path assessment keyword are reserved words of the network monitoring programming language. 18. The system of claim 16, wherein the behavior keyword assessment is any one of: high, low, and normal. 19. The system of claim 16, wherein the application path keyword assessment is any one of: a specific number, a specific label, a list of numbers, a list of labels, ‘all’, and ‘any’. 20. The system of claim 16, wherein the application path keyword relates to an application path attribute including any one of: an application name, a device type, an operating system type, an operating system version, a geographical location, a browser type, an application type, and an application version. 21. The system of claim 16, wherein the behavior keyword relates to a behavioral parameter including any one of: a packet rate, a byte rate, a data direction, a plurality of new connections per second (CPS), a concurrent number of connections per application (CUC), a connection duration, and a transport protocol state. 22. The system of claim 15, wherein the system is further configured to: parse the at least one target and the at least one condition to generate a list of entities and a list of interference modules; and evaluate, using the list of interference modules, at least a degree of fulfillment (DoF), wherein the DoF defines a behavior group that the plurality of terms satisfy with respect to the at least one target. 23. The system of claim 22, wherein the system is further configured to: for each of the plurality terms: sample, at predefined time intervals, data of behavioral parameters related to behavior keywords defined in the term; and compute behavioral scores using the sampled data and the behavior keyword assessment. correlate the computed behavioral scores using the plurality of terms and Boolean expressions to generate the at least one DoF. 24. The system of claim 22, wherein the behavior group defines any one of: variance of chatty activity, variance of malware activity, and variance of scanning activity. 25. The system of claim 15, wherein the at least one condition is dynamically changed. 26. The system of claim 15, wherein the network monitoring programming language is a human linguistics programming language.