Analyzing large data sets to find deviation patterns
First Claim
Patent Images
1. A computer-implemented method for identifying abnormal behavior of sets of operators, the method comprising:
- observing behaviors of the operators;
separating operators into groupings, each grouping comprising a plurality of operators;
subsequent to the separating, calculating a test statistic for each grouping based on the observed behaviors for the operators in the grouping, the test statistic testing whether all operators behave in a same manner; and
identifying abnormal behavior for one grouping relative to other groupings, based on statistically significant deviations of the test statistic for the one grouping relative to a normative baseline of similarity amongst the other groupings.
3 Assignments
0 Petitions
Accused Products
Abstract
Operations, such as data processing operations, can be improved by applying clustering and statistical techniques to observed behaviors in the data processing operations.
-
Citations
21 Claims
-
1. A computer-implemented method for identifying abnormal behavior of sets of operators, the method comprising:
-
observing behaviors of the operators; separating operators into groupings, each grouping comprising a plurality of operators; subsequent to the separating, calculating a test statistic for each grouping based on the observed behaviors for the operators in the grouping, the test statistic testing whether all operators behave in a same manner; and identifying abnormal behavior for one grouping relative to other groupings, based on statistically significant deviations of the test statistic for the one grouping relative to a normative baseline of similarity amongst the other groupings. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. A computer program product for identifying abnormal behavior of sets of operators, the computer program product stored on a non-transitory computer-readable medium and including instructions that, when loaded into memory, cause a processor to carry out a method comprising:
-
observing behaviors of the operators; separating operators into groupings, each grouping comprising a plurality of operators; subsequent to the separating, calculating a test statistic for each grouping based on the observed behaviors for the operators in the grouping, the test statistic testing whether all operators behave in a same manner; and identifying abnormal behavior for one grouping relative to other groupings, based on statistically significant deviations of the test statistic for the one grouping relative to a normative baseline of similarity amongst the other groupings. - View Dependent Claims (13, 14, 15, 16, 17, 18, 19, 20, 21)
-
Specification