公开(公告)号：US07620523B2

公开(公告)日：2009-11-17

申请号：US11742479

申请日：2007-04-30

申请人： Mazda A. Marvasti ,  Daniel R. Jeske

发明人： Mazda A. Marvasti ,  Daniel R. Jeske

IPC分类号： G06F11/30 ,  G08B21/00

CPC分类号： G05B23/0221 ,  G05B23/024 ,  G06K9/00536

摘要： According to a feature of the present disclosure, a method is provided for the determination of anomalous events in complex systems, such as problems, inefficiencies, and failures, and a tool is provided for the detection of these events. Many complex systems are non-stationary or experience periodic fluctuations or spikes in values that are outside of normal ranges, but constitute normal behavior nevertheless. The method accounts for both non-stationarity, as well as fluctuations and spikes. Additional novel features include both a threshold setting initialization method and a regression method for the determination of the start points and end points of events.

摘要翻译： 根据本公开的特征，提供了一种用于确定复杂系统中的异常事件的方法，例如问题，低效率和故障，并且提供了用于检测这些事件的工具。 许多复杂的系统是不稳定的，或者经历超出正常范围的值的周期性波动或尖峰，但是构成正常行为。 该方法考虑到非平稳性，以及波动和尖峰。 附加的新颖特征包括阈值设置初始化方法和用于确定事件的起始点和终点的回归方法。

公开(公告)号：US20080270071A1

公开(公告)日：2008-10-30

申请号：US11742479

申请日：2007-04-30

申请人： Mazda A. Marvasti ,  Daniel R. Jeske

发明人： Mazda A. Marvasti ,  Daniel R. Jeske

IPC分类号： G06F17/18 ,  G06F17/10

CPC分类号： G05B23/0221 ,  G05B23/024 ,  G06K9/00536

摘要： According to a feature of the present disclosure, a method is provided for the determination of anomalous events in complex systems, such as problems, inefficiencies, and failures, and a tool is provided for the detection of these events. Many complex systems are non-stationary or experience periodic fluctuations or spikes in values that are outside of normal ranges, but constitute normal behavior nevertheless. The method accounts for both non-stationarity, as well as fluctuations and spikes. Additional novel features include both a threshold setting initialization method and a regression method for the determination of the start points and end points of events.

摘要翻译： 根据本公开的特征，提供了一种用于确定复杂系统中的异常事件的方法，例如问题，低效率和故障，并且提供了用于检测这些事件的工具。 许多复杂的系统是不稳定的，或者经历超出正常范围的值的周期性波动或尖峰，但是构成正常行为。 该方法考虑到非平稳性，以及波动和尖峰。 附加的新颖特征包括阈值设置初始化方法和用于确定事件的起始点和终点的回归方法。

公开(公告)号：US08275563B2

公开(公告)日：2012-09-25

申请号：US12976586

申请日：2010-12-22

申请人： Mazda A. Marvasti ,  Daniel R. Jeske

发明人： Mazda A. Marvasti ,  Daniel R. Jeske

IPC分类号： G01N37/00 ,  G08B21/00

CPC分类号： G05B23/0221 ,  G05B23/024 ,  G06K9/00536

摘要： According to a feature of the present disclosure, a method is provided for the determination of anomalous events in complex systems, such as problems, inefficiencies, and failures, and a tool is provided for the detection of these events. Many complex systems are non-stationary or experience periodic fluctuations or spikes in values that are outside of normal ranges, but constitute normal behavior nevertheless. The method accounts for both non-stationarity, as well as fluctuations and spikes. Additional novel features include both a threshold setting initialization method and a regression method for the determination of the start points and end points of events.

摘要翻译： 根据本公开的特征，提供了一种用于确定复杂系统中的异常事件的方法，例如问题，低效率和故障，并且提供了用于检测这些事件的工具。 许多复杂的系统是不稳定的，或者经历超出正常范围的值的周期性波动或尖峰，但是构成正常行为。 该方法考虑到非平稳性，以及波动和尖峰。 附加的新颖特征包括阈值设置初始化方法和用于确定事件的起始点和终点的回归方法。

公开(公告)号：US07869967B2

公开(公告)日：2011-01-11

申请号：US12619601

申请日：2009-11-16

申请人： Mazda A. Marvasti ,  Daniel R. Jeske

发明人： Mazda A. Marvasti ,  Daniel R. Jeske

IPC分类号： G01N37/00 ,  G08B21/00

CPC分类号： G05B23/0221 ,  G05B23/024 ,  G06K9/00536

摘要： According to a feature of the present disclosure, a method is provided for the determination of anomalous events in complex systems, such as problems, inefficiencies, and failures, and a tool is provided for the detection of these events. Many complex systems are non-stationary or experience periodic fluctuations or spikes in values that are outside of normal ranges, but constitute normal behavior nevertheless. The method accounts for both non-stationarity, as well as fluctuations and spikes. Additional novel features include both a threshold setting initialization method and a regression method for the determination of the start points and end points of events.

摘要翻译： 根据本公开的特征，提供了一种用于确定复杂系统中的异常事件的方法，例如问题，低效率和故障，并且提供了用于检测这些事件的工具。 许多复杂的系统是不稳定的，或者经历超出正常范围的值的周期性波动或尖峰，但是构成正常行为。 该方法考虑到非平稳性，以及波动和尖峰。 附加的新颖特征包括阈值设置初始化方法和用于确定事件的起始点和终点的回归方法。

公开(公告)号：US20100063773A1

公开(公告)日：2010-03-11

申请号：US12619601

申请日：2009-11-16

申请人： Mazda A. Marvasti ,  Daniel R. Jeske

发明人： Mazda A. Marvasti ,  Daniel R. Jeske

IPC分类号： G06F17/18

CPC分类号： G05B23/0221 ,  G05B23/024 ,  G06K9/00536

摘要： According to a feature of the present disclosure, a method is provided for the determination of anomalous events in complex systems, such as problems, inefficiencies, and failures, and a tool is provided for the detection of these events. Many complex systems are non-stationary or experience periodic fluctuations or spikes in values that are outside of normal ranges, but constitute normal behavior nevertheless. The method accounts for both non-stationarity, as well as fluctuations and spikes. Additional novel features include both a threshold setting initialization method and a regression method for the determination of the start points and end points of events.

摘要翻译： 根据本公开的特征，提供了一种用于确定复杂系统中的异常事件的方法，例如问题，低效率和故障，并且提供了用于检测这些事件的工具。 许多复杂的系统是不稳定的，或者经历超出正常范围的值的周期性波动或尖峰，但是构成正常行为。 该方法考虑到非平稳性，以及波动和尖峰。 附加的新颖特征包括阈值设置初始化方法和用于确定事件的起始点和终点的回归方法。

公开(公告)号：US08266279B2

公开(公告)日：2012-09-11

申请号：US12693358

申请日：2010-01-25

申请人： Mazda A. Marvasti

发明人： Mazda A. Marvasti

IPC分类号： G06F15/173

CPC分类号： H04L41/0631

摘要： A system and method is provided for capturing and using problem fingerprints in an Information Technology (IT) infrastructure for integrity management. A fingerprint of the transaction topology in an IT infrastructure is automatically captured at various time intervals prior to the occurrence of an event leading to a problem, such as a failure, hard threshold violation, defined transaction violation or user-provided occurrence. The fingerprint provides an indication of the activity and operation of the IT infrastructure immediately preceding the problem event. The captured fingerprint is then used to monitor real-time data in the IT infrastructure operation and activity to look for activity that matches a captured fingerprint to provide an indication of a pending problems before the problems occur. When it is determined that there is sufficient probability a problem event will occur based upon real-time data matching a previously generated problem fingerprint, an alert is generated to provide sufficient notification prior to the occurrence of problem event.

摘要翻译： 提供了一种用于在信息技术（IT）基础设施中捕获和使用问题指纹以进行完整性管理的系统和方法。 导致IT基础结构中的事务拓扑的指纹在导致问题的事件发生之前的各个时间间隔被自动捕获，例如故障，硬阈值违规，定义的事务冲突或用户提供的事件。 该指纹提供了紧急问题事件之前的IT基础设施的活动和操作的指示。 然后，捕获的指纹用于监视IT基础架构操作和活动中的实时数据，以查找与捕获的指纹匹配的活动，以在发生问题之前提供未决问题的指示。 当基于与先前生成的问题指纹匹配的实时数据确定有足够的可能性将发生问题事件时，生成警报以在发生问题事件之前提供充分的通知。

公开(公告)号：US20100083054A1

公开(公告)日：2010-04-01

申请号：US12242153

申请日：2008-09-30

申请人： Mazda A. Marvasti

发明人： Mazda A. Marvasti

IPC分类号： G06F11/34

CPC分类号： G06F11/0751 ,  G06F11/0709 ,  H04L41/0681 ,  H04L41/147 ,  H04L43/16

摘要： A system and method are provided for determining problem conditions in an IT infrastructure using aggregate anomaly analysis. The anomalies in the metrics occurring in the monitored IT infrastructure are aggregated from all resources reporting metrics as a function of time. The aggregated metric anomalies are then normalized to account for the state of the monitored IT infrastructure to provide a normalized aggregate anomaly count. A threshold noise level is then determined utilizing a variably selectable desired level of confidence such that a problem event is only determined to likely be occurring in the IT infrastructure when the normalized aggregate anomaly count exceeds the threshold noise level. The normalized aggregate anomaly count is monitored against the threshold noise level as a function of time, such that a problem event in the IT infrastructure is identified when the normalized aggregate anomaly count exceeds the threshold noise level at a given time.

摘要翻译： 提供了一种用于使用聚合异常分析来确定IT基础架构中的问题状况的系统和方法。 受监控的IT基础设施中发生的指标中的异常会从作为时间的函数的所有资源报告指标汇总。 然后对聚合的度量异常进行归一化以考虑受监视的IT基础结构的状态，以提供归一化的聚合异常计数。 然后使用可变地选择的期望可信度来确定阈值噪声电平，使得仅当标准化的聚合异常计数超过阈值噪声电平时，问题事件才被确定为可能发生在IT基础设施中。 根据阈值噪声水平作为时间的函数监测归一化的聚集异常计数，使得当标准化的聚集异常计数超过给定时间的阈值噪声水平时，IT基础设施中的问题事件被识别。

公开(公告)号：US20100036643A1

公开(公告)日：2010-02-11

申请号：US12186494

申请日：2008-08-05

申请人： Mazda A. Marvasti ,  Astghik Grigoryan ,  Arnak Poghosyan ,  Naira Grigoryan ,  Ashot Harutyunyan

发明人： Mazda A. Marvasti ,  Astghik Grigoryan ,  Arnak Poghosyan ,  Naira Grigoryan ,  Ashot Harutyunyan

IPC分类号： G06F15/00

CPC分类号： G06F17/30598 ,  G06F17/30548 ,  G06Q40/00 ,  H04L67/22

摘要： Cycles and other patterns within time-series data are determined. Time-series data are transformed into discretized sets of clustered data that are organized by time period. Comparison is made of the organized data to determine similar time periods and multiclusters of the similar time periods are formed. From the multicluster data, cycles are identified from which thresholds and other useful data may be derived, or the data used for other useful purposes.

摘要翻译： 确定时间序列数据内的周期和其他模式。 时间序列数据被转换成按时间段组织的离散化的聚类数据集。 比较有组织的数据来确定类似的时间段，形成类似时间段的多个群集。 从多集群数据中，识别可以从哪个阈值和其他有用数据导出的周期，或用于其他有用目的的数据。

公开(公告)号：US08751867B2

公开(公告)日：2014-06-10

申请号：US13271554

申请日：2011-10-12

申请人： Mazda A. Marvasti ,  Arnak Poghosyan ,  Ashot Harutyunyan ,  Naira Grigoryan

发明人： Mazda A. Marvasti ,  Arnak Poghosyan ,  Ashot Harutyunyan ,  Naira Grigoryan

IPC分类号： G06F11/00

CPC分类号： H04L41/142 ,  G06F11/0706 ,  G06F11/079 ,  H04L41/0631 ,  H04L41/065 ,  H04L41/069 ,  H04L41/147

摘要： An approach to root cause determination in a complex systems based on monitoring and event data is disclosed. It includes a historical analysis of events with their probabilistic correlations. Applying information measures between the random variables which embody those events one can detect origins of problems and generate real-time recommendations for their locations in a hierarchical system. Estimation of system bottlenecks, as well as the risk of “black swan”-type events are also computed. The processes are based on a statistical processing of a virtual directed graph produced from historical events.

摘要翻译： 公开了一种基于监测和事件数据的复杂系统中根本原因确定的方法。 它包括对其事件与其概率相关性的历史分析。 应用信息测量在具有这些事件的随机变量之间，可以检测到问题的起源，并为分层系统中的位置生成实时建议。 还计算了系统瓶颈的估计以及“黑天鹅”型事件的风险。 这些过程基于从历史事件产生的虚拟有向图的统计处理。

公开(公告)号：US07707285B2

公开(公告)日：2010-04-27

申请号：US11535787

申请日：2006-09-27

申请人： Mazda A. Marvasti

发明人： Mazda A. Marvasti

IPC分类号： G06F15/173

CPC分类号： H04L41/0631

摘要： A system and method is provided for capturing and using problem fingerprints in an Information Technology (IT) infrastructure for integrity management. A fingerprint of the transaction topology in an IT infrastructure is automatically captured at various time intervals prior to the occurrence of an event leading to a problem, such as a failure, hard threshold violation, defined transaction violation or user-provided occurrence. The fingerprint provides an indication of the activity and operation of the IT infrastructure immediately preceding the problem event. The captured fingerprint is then used to monitor real-time data in the IT infrastructure operation and activity to look for activity that matches a captured fingerprint to provide an indication of a pending problems before the problems occur. When it is determined that there is sufficient probability a problem event will occur based upon real-time data matching a previously generated problem fingerprint, an alert is generated to provide sufficient notification prior to the occurrence of problem event.

摘要翻译： 提供了一种用于在信息技术（IT）基础设施中捕获和使用问题指纹以进行完整性管理的系统和方法。 导致IT基础结构中的事务拓扑的指纹在导致问题的事件发生之前的各个时间间隔被自动捕获，例如故障，硬阈值违规，定义的事务冲突或用户提供的事件。 该指纹提供了紧急问题事件之前的IT基础设施的活动和操作的指示。 然后，捕获的指纹用于监视IT基础架构操作和活动中的实时数据，以查找与捕获的指纹匹配的活动，以在发生问题之前提供未决问题的指示。 当基于与先前生成的问题指纹匹配的实时数据确定有足够的可能性将发生问题事件时，生成警报以在发生问题事件之前提供充分的通知。