Anomaly detection for computer systems
US11341237B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Mar 26, 2018 |
| Grant date | May 24, 2022 |
| Priority date | — |
| Expiry date | Nov 13, 2038 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/20
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
A computer implemented method to detect a computer system in execution operating in a manner that is not compliant with a definition of a set of compliant operations, the method including receiving a first set of records for the computer system, each record detailing an occurrence in the computer system during a first predetermined time period; generating a sparse distributed representation of the set of records to form a training set for a hierarchical temporal memory (HTM); training the HTM based on the training set in order that the trained HTM provides a model of the operation of the computer system during the predetermined time period; selecting at least a subset of operations in the set of compliant operations and causing the invocation of each operation of the subset in the computer system over a second predetermined time period to generate a second set of records of occurrences in the computer system; generating a sparse distributed representation of the set of records to form an input set for the trained HTM; executing the trained HTM based on the input set to determine a degree of recognition of the records of the input set; and responsive to a determination that a degree…
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.