ADAPTIVE ANOMALY DETECTION FOR COMPUTER SYSTEMS

    公开(公告)号:US20200059482A1

    公开(公告)日:2020-02-20

    申请号:US16103108

    申请日:2018-08-14

    Applicant: VMware, Inc.

    Abstract: Feature vectors are abstracted from data describing application processes. The feature vectors are grouped to define non-anomalous clusters of feature vectors corresponding to normal application behavior. Subsequent feature vectors are considered anomalous if they do not fall within one of the non-anomalous clusters; alerts are issued for anomalous feature vectors. In addition, the subsequent feature vectors may be used to regroup feature vectors to adapt to changes in what constitutes normal application behavior.

Patent Agency Ranking