EVENT ANOMALY ANALYSIS AND PREDICTION

摘要

According to an example, event anomaly analysis and prediction may include accessing a master directed graph that specifies known events and transitions between the known events, and ranking each of the known events. Each of the ranked known events may be clustered into a plurality of anomaly categories. A plurality of rules to analyze new events may be determined based on the plurality of anomaly categories. A determination may be made, based on an application of the plurality of rules to data that is to be analyzed for an anomaly, whether the data includes the anomaly. In response to a determination that the data includes the anomaly, a device associated with the data may be controlled.

主权项

1. An event anomaly analysis and prediction apparatus comprising:
a processor; and a memory storing machine readable instructions that when executed by the processor cause the processor to:
access at least one master directed graph that specifies known events and transitions between the known events;rank each of the known events, wherein
the ranking of each of the known events is based on a probability of anomalousness assigned to each of the known events, andthe probability of anomalousness assigned to a known event of the known events is determined relative to each of the other known events;cluster each of the ranked known events into a plurality of anomaly categories;determine, based on the plurality of anomaly categories, a plurality of rules to analyze new events;access data that is to be analyzed for an anomaly;determine, based on an application of the plurality of rules to the data, whether the data includes the anomaly; andin response to a determination that the data includes the anomaly, control a device associated with the data.