System and method of anomaly detection with categorical attributes
US9030316B2 · kind B2 · utility
2Cited by
1References
20Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Mar 12, 2013 |
| Grant date | May 12, 2015 |
| Priority date | — |
| Expiry date | Nov 21, 2033 |
Classification
- Technology area (CPC Y)Emerging Cross-Sectional Technologies
- CPC primaryY10S707/952
- WIPO fieldControl
- WIPO sectorInstruments
Abstract
A method and apparatus where the method includes detecting a plurality of events related to the activities of users within a security system wherein the events are defined by a plurality of attributes, wherein at least one attribute is categorical and wherein a data distance between events is a function of event attributes, evaluating the detected events using a density based anomaly detection method f(r), where r is a size of a neighborhood around a data point, comparing a value of the evaluated expression with a margin threshold value (msg(r)) and setting an alarm upon detecting that the value exceeds the threshold value.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.