| 主权项 |
1. A stream data anomaly detection method, for detecting an anomaly from input data received by an interface on a computer,
the computer comprising:
a processor;a memory;the interface;an input module for receiving the input data;an anomaly detection module for detecting the anomaly from the input data; andan index management module for managing an index for detecting the anomaly from the input data, the anomaly detection method for stream data comprising: a first step of receiving, by the input module, the input data received by the interface; a second step of comparing, by the anomaly detection module, the received input data with the index, and when a difference between a value of the input data and the index satisfies a predetermined condition, detecting the anomaly from the input data; and a third step of determining, by the index management module, whether to recalculate the index, the third step comprising:
a fifth step of calculating a maximum count of the recalculation of the index based on an amount of unprocessed input data that is yet to be processed by the anomaly detection module among pieces of input data received by the input module, an arithmetic operation time required for the recalculation of the index, and a time constraint set in advance;a sixth step of calculating a predetermined threshold value for each piece of input data received after the previous calculation of the index;a seventh step of calculating the difference between the value of the input data and the index;an eighth step of comparing the difference with the predetermined threshold value that corresponds to the piece of input data, determining that the index is to be recalculated when the difference is greater than the predetermined threshold value, and executing processing for executing the recalculation of the index until the maximum count of the recalculation is reached, when the index is determined to be recalculated; anda ninth step of substituting the index with the recalculated new index. |
