Anomaly detection system and a method of teaching it

Details Anomaly detection system and a method of teaching it Anomaly detection system and a method of teaching it

2003-03-07

2009-11-03

Champagne, Donald L (Department: 3622)

Data processing: artificial intelligence

Neural network

Learning method

C706S012000

Reexamination Certificate

active

07613668

ABSTRACT:
A method for teaching an anomaly detecting mechanism in a system comprising observable elements (302), at least one of which has a periodic time-dependent behaviour, the anomaly detecting mechanism comprising a computerized learning mechanism (314). The method comprises assembling indicators (304) indicating the behaviour of the elements (302) and arranging the assembled indicators such that each observable element's indicators are assigned to the same input data component. The learning mechanism (314) is taught so that the input data of the learning mechanism comprises the input data components which are based on the assembled indicators (304). Points which approximate the input data are placed in the input space. A presentation of time (420-424) is incorporated into at least one input data component wherein the presentation of time is periodic, continuous and un-ambiguous within the period of the at least one element with periodic time-dependent behaviour.

REFERENCES:
patent: 5206640 (1993-04-01), Hirvonen et al.
patent: 5819226 (1998-10-01), Gopinathan et al.
patent: 5966650 (1999-10-01), Hobson et al.
patent: 6038555 (2000-03-01), Field et al.
“Tide”, Encyclopedia Britannica article downloaded from http://www.search.eb.com/eb/article?tocld=9072409&query=tide&ct=eb, Nov. 29, 2004.
Definitions of “presentation” and “period” from Merriam-Webster's Collegiate Dictionary accessed at http://www.search.eb.com/dictionary, Apr. 20, 2005.
“Temporal Sequence Learning and Data Reduction for Anomaly Detection”, Lane et al, ACM Transactions on Information and System Security, 2:295-331, 1999, pp. 150-158.
“An Anomaly Detection System for Computer Networks”, Albert Höglund, Master of Science thesis, Helsinki University of Technology 1997, 72 pages.
Article entitled “A Computer Host-Based User Anomaly Detection System Using the Self-Organizing Map”, Höglund et al, 6 Pages.
Article entitled “Computer Network User Behaviour Visualisation Using Self Organising Maps”, Höglund et al, 6 Pages.

Affiliated with

Also associated with

Rating

Anomaly detection system and a method of teaching it does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Anomaly detection system and a method of teaching it, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Anomaly detection system and a method of teaching it will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4092921