System, device and method for automatic anomaly detection
First Claim
1. A method, comprising:
- repeatedly detecting at least one parameter of at least one observable object of a network;
checking the at least one parameter with regard to fulfilling predetermined criteria; and
forming a vector based on the at least one parameter depending on whether the at least one parameter fulfills the predetermined criteria,wherein the vector comprises several values which describe properties or functioning of the observable object, and the formed vector is evaluated to monitor a behavior of the observable object, andwherein a number of parameters that fulfill the predetermined criteria during an observation period, is counted, to form key performance indicator (KPI) values which form part of the vector, each parameter having its own criteria.
1 Assignment
0 Petitions
Accused Products
Abstract
A method and system for monitoring the behavior of at least one observable object, e.g. a network element, of a network, wherein at least one parameter of the observable object is repeatedly detected. An actually detected parameter is input to a learning process and to an analyzing process, wherein the learning process forms a reference, based on at least two detected parameter values, for describing the behavior of the observable object. The analyzing process compares the input parameter and the reference for detecting an anomal behavior. The parameter preferably is a vector which includes several values describing properties or functioning of the observable object, and is formed based on events and/or reports from the object.
101 Citations
21 Claims
-
1. A method, comprising:
-
repeatedly detecting at least one parameter of at least one observable object of a network; checking the at least one parameter with regard to fulfilling predetermined criteria; and forming a vector based on the at least one parameter depending on whether the at least one parameter fulfills the predetermined criteria, wherein the vector comprises several values which describe properties or functioning of the observable object, and the formed vector is evaluated to monitor a behavior of the observable object, and wherein a number of parameters that fulfill the predetermined criteria during an observation period, is counted, to form key performance indicator (KPI) values which form part of the vector, each parameter having its own criteria. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13)
-
-
14. A system, comprising:
-
a detector configured to detect at least one parameter of at least one observable object of a network; a checking circuit configured to check the at least one parameter with regard to fulfilling predetermined criteria; a forming circuit configured to form a vector based on the at least one parameter depending on whether the at least one parameter fulfills the predetermined criteria, wherein the vector comprises several values which describe properties or functioning of the observable object; and an evaluating circuit configured to evaluate the formed vector to monitor a behavior of the observable object, wherein a number of parameters that fulfill the predetermined criteria during an observation period, is counted, to form key performance indicator (KIN) values which form part of the vector, each parameter having its own criteria.
-
-
15. An apparatus, comprising:
-
a detector configured to repeatedly detecting at least one parameter of at least one observable object of a network; a checking circuit configured to check the at least one parameter with regard to fulfilling predetermined criteria; and a forming circuit configured to form a vector based on the at least one parameter depending on whether the at least one parameter fulfills the predetermined criteria, wherein the vector comprises several values which describe properties or functioning of the observable object; and an evaluating circuit configured to evaluate the formed vector to monitor a behavior of the observable object, wherein a number of parameters that fulfill the predetermined criteria during an observation period, is counted, to form key performance indicator (KPI) values which form part of the vector, each parameter having its own criteria. - View Dependent Claims (16, 17, 18, 19)
-
-
20. An apparatus, comprising:
-
detecting means for detecting at least one parameter of at least one observable object of a network; checking means for checking the at least one parameter with regard to fulfilling predetermined criteria; forming means for forming a vector based on the at least one parameter depending on the result of the checking means, wherein the vector comprises several values which describe properties or functioning of the observable object; and evaluating means for evaluating the formed vector for monitoring the behavior of the observable objects, wherein a number of parameters that fulfill the predetermined criteria daring an observation period, is counted, to form key performance indicator (KPI) values which form part of the vector, each parameter having its own criteria.
-
-
21. A computer program, embodied on a computer readable medium, configured to control a processor to implement a method, the method comprising:
-
repeatedly detecting at least one parameter of at least one observable object of a network; checking the at least one parameter with regard to fulfilling predetermined criteria; and forming a vector based on the at least one parameter depending on whether the at least one parameter fulfills the predetermined criteria, wherein the vector comprises several values which describe properties or functioning of the observable object, and the formed vector is evaluated to monitor a behavior of the observable object, and wherein a number of parameters that fulfill the predetermined criteria during an observation period, is counted, to form key performance indicator (KPI) values which form pall of the vector, each parameter having its own, criteria.
-
Specification