发明名称 |
System and method of anomaly detection with categorical attributes |
摘要 |
A method and apparatus where the method includes detecting a plurality of events related to the activities of users within a security system wherein the events are defined by a plurality of attributes, wherein at least one attribute is categorical and wherein a data distance between events is a function of event attributes, evaluating the detected events using a density based anomaly detection method f(r), where r is a size of a neighborhood around a data point, comparing a value of the evaluated expression with a margin threshold value (msg(r)) and setting an alarm upon detecting that the value exceeds the threshold value. |
申请公布号 |
US9030316(B2) |
申请公布日期 |
2015.05.12 |
申请号 |
US201313795796 |
申请日期 |
2013.03.12 |
申请人 |
Honeywell International Inc. |
发明人 |
Libal Vit;Vacha Pavel;Guralnik Valerie |
分类号 |
G08B23/00;G06F11/00;G08B25/00;G08B29/18;G08B31/00 |
主分类号 |
G08B23/00 |
代理机构 |
Husch Blackwell LLP |
代理人 |
Husch Blackwell LLP |
主权项 |
1. A method comprising:
detecting a plurality of events related to the activities of users within a security system wherein the events are defined by a plurality of attributes, wherein at least one attribute is categorical and wherein a data distance between events is a function of event attributes; evaluating the detected events using a density based anomaly detection method, f(r), where r is a size of a neighborhood around a data point representing the event; comparing a value of the evaluated expression with a margin threshold value (msg(r)); and setting an alarm upon detecting that the value exceeds the threshold value. |
地址 |
Morristown NJ US |