METHOD AND SYSTEM FOR THE DETECTION OF ANOMALOUS SEQUENCES IN A DIGITAL SIGNAL

摘要

Method and system for the detection of anomalous behavior in systems displaying typical and complex behavior encoded in a digital signal through the study of a computational model (artificial system) of interacting agents defined using the information contained in the digital signal and imposing that agents engage in a maximally frustrated dynamics. Changes in the target system's behavior lead a measurable decrease in frustration of the artificial system, from sequences never presented before during the system's normal behavior or combinations of already presented sequences never seen together.

主权项

1. A method for the detection of anomalous sequences in a digital signal to be tested as compared to an initial digital signal, divided in three stages designated by repertoire education, calibration and detection, wherein:
using agents, and where each agent comprises:
1) a sequence with d digits, referred to as a ligand;2) a list with a plurality of sequences with d digits, referred to as a receptor;3) a state, indicating when it is off, in which case the agent is said to be alone, or if it is on, in which case with another agent it is said to be paired;4) a connectivity list, in which is listed a selection of other agents with which the agent can interact; Comprising the following steps:
a) initializing a population of presenter agents each one from a set of sequences taken from a pre-established number of sequences defined from a training digital signal, during the education and calibration stages, or from a signal to be tested, in the detection stage;b) initializing a population of detector agents;c) during a time to be established, it is done:
i) interacting between presenter and detector agents;ii) replacing detector agents that do not form pairs after a pre-established time, calling this action a positive selection and applying it during the education of the first population to be included in the detection repertoire;iii) replacing detector agents that are paired a presenter agent for a time longer than a pre-established time, calling this action as a negative selection and applying it during the education of the repertoire;iv) replacing detector agents terminating pairings longer than a pre-established time duration and not forming a new pairing, by other equivalent detector agents in the repertoire, calling this action anergy and applying it during the calibration and anomaly detection;d) adding the educated population of detector agents to a repertoire of detector agents during the repertoire education stage;e) detecting any possible increase in the duration and number of long pairings between presenter and detector agents and/or any possible increase in the duration and number of times detector agents are not paired, signaling the presence of anomalous sequences or anomalous combinations of known sequences; and for the said interaction pairing agents of the opposite types:
a′) when two agents are not paired, whenever for both agents the other agent's ligand is listed in its receptor;b′) when an agent is not paired and the other is paired, whenever in the receptor of the agent that is not paired is the other agent's ligand, and the receptor of the paired agent prefers the ligand of the agent not paired to the ligand of agent to which it is paired;c′) when two agents are already paired, whenever for both agents their receptors prefer the ligand of the other agent to the ligand of the agent to which they are paired.