DETECTION OF ANOMALOUS COMPUTING ENVIRONMENT BEHAVIOR USING GLUCOSE

Detection of anomalous computing environment behavior using glucose is described. An anomaly detection system receives glucose measurements and event records during a first time period. Missing events that are missing from the event records during the first time period are identified by processing t...

Full description

Saved in:
Bibliographic Details
Main Authors BOBER, Brian, PICKUS, Sarah Kate
Format Patent
LanguageEnglish
Published 06.07.2023
Subjects
DIAGNOSIS
HUMAN NECESSITIES
HYGIENE
IDENTIFICATION
MEDICAL OR VETERINARY SCIENCE
SURGERY
Online AccessGet full text

Cover

More Information
Summary:Detection of anomalous computing environment behavior using glucose is described. An anomaly detection system receives glucose measurements and event records during a first time period. Missing events that are missing from the event records during the first time period are identified by processing the glucose measurements using an event engine simulator. An anomaly detection model is generated based on the missing events during the first time period. Subsequently, the anomaly detection system receives additional glucose measurements and additional event records during a second time period. Missing events that are missing from the additional event records during the second time period are identified by processing the additional glucose measurements using the event engine simulator. Anomalous behavior is detected if the identified missing events that are missing from the event records during the second time period are outside a predicted range of missing events of the anomaly detection model.
Bibliography:Application Number: AU20210386130