METHOD FOR DETECTION OF ANOMOLOUS OPERATION OF A SYSTEM

    公开(公告)号:US20230123872A1

    公开(公告)日:2023-04-20

    申请号:US17906196

    申请日:2021-03-19

    IPC分类号: G06F21/55 G06F21/62

    摘要: A computer-implemented method of detecting an anomalous action associated with a physical system includes developing, by a computing device a plurality of vectors, each vector indicative of an event that occurred at a specific time within the system, combining, with the computing device each vector that occurred within a predefined time duration into one of a plurality of master vectors, and performing, with the computing device a cluster analysis to group each master vector of the plurality of master vectors into one of a plurality of states. The method also includes determining, with the computing device a real-time master vector based at least in part on one or more events that occur within the predefined time duration, classifying, with the computing device the real-time master vector as a real-time state, and indicating that the real-time state is anomalous when the real-time state doesn't match one of the plurality of states.