DISCOVERY OF UNUSUAL, UNEXPECTED, OR ANOMALOUS INFORMATION AND TRENDS IN HIGH THROUGHPUT DATA STREAMS AND DATABASES USING PROBABILITSTIC SURPRISAL CONTEXT FILTERS
First Claim
Patent Images
1. A method for detecting anomalous events from a data input comprising a plurality of events, comprising the steps of:
- a computer selecting at least one filter selecting for context data determined to be probabilistically present within a specified degree of certainty in the data input;
the computer comparing the data input to the selected at least one filter;
the computer discarding the events from the data input that are the same as the context data for which the at least one filter selects; and
the computer storing in a repository the events remaining in the data input as anomalous events.
3 Assignments
0 Petitions
Accused Products
Abstract
A method, system, and computer program product for detecting anomalous events from a data input comprising a plurality of events. The method comprising the steps of: selecting at least one filter selecting for context data determined to be probabilistically present within a specified degree of certainty in the data input; comparing the data input to the selected at least one filter; discarding the events from the data input that are the same as the context data for which the at least one filter selects; and storing in a repository the events remaining in the data input as anomalous events.
2 Citations
15 Claims
-
1. A method for detecting anomalous events from a data input comprising a plurality of events, comprising the steps of:
-
a computer selecting at least one filter selecting for context data determined to be probabilistically present within a specified degree of certainty in the data input; the computer comparing the data input to the selected at least one filter; the computer discarding the events from the data input that are the same as the context data for which the at least one filter selects; and the computer storing in a repository the events remaining in the data input as anomalous events. - View Dependent Claims (2, 3, 4, 5)
-
-
6. A computer program product for detecting anomalous events from a data input comprising a plurality of events, the computer program product comprising:
-
one or more computer-readable, tangible storage devices; program instructions, stored on at least one of the one or more storage devices, to select at least one filter selecting for context data determined to be probabilistically present within a specified degree of certainty in the data input;
program instructions, stored on at least one of the one or more storage devices, to compare the data input to the selected at least one filter;program instructions, stored on at least one of the one or more storage devices, to discard the events from the data input that are the same as the context data for which the at least one filter selects; and program instructions, stored on at least one of the one or more storage devices, to store in a repository the events remaining in the data input as anomalous events. - View Dependent Claims (7, 8, 9, 10)
-
-
11. A system for detecting anomalous events from a data input comprising a plurality of events, the system comprising:
-
one or more processors, one or more computer-readable memories and one or more computer-readable, tangible storage devices; program instructions, stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, to select at least one filter selecting for context data determined to be probabilistically present within a specified degree of certainty in the data input;
program instructions, stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, to compare the data input to the selected at least one filter;program instructions, stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, to discard the events from the data input that are the same as the context data for which the at least one filter selects; and program instructions, stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, to store in a repository the events remaining in the data input as anomalous events. - View Dependent Claims (12, 13, 14, 15)
-
Specification