公开(公告)号：WO2017072356A1

公开(公告)日：2017-05-04

申请号：PCT/EP2016/076213

申请日：2016-10-31

Applicant: OPT/NET CONSULTING B.V. ,  MATSELYUKH, Taras

Inventor： MATSELYUKH, Taras

IPC: H04L29/06 ,  H04L12/24

CPC classification number: H04L63/1425 ,  G06F21/566 ,  H04L41/142 ,  H04L41/16

Abstract: There is provided a method for detecting an anomaly in plurality of data streams originating from a system or network of systems. Data streams are collected from the system or systems and divided into a plurality of time intervals. For each of the plurality of time intervals, a value for a parameter associated with the data stream is determined. A deviation in the determined values is calculated for the parameters associated with the data stream from expected values for the parameters and, if the calculated deviation is above a threshold, an anomaly is detected in the collected data stream.

Abstract translation: 提供了一种用于检测源自系统或系统网络的多个数据流中的异常的方法。 数据流从系统或系统收集并分成多个时间间隔。 对于多个时间间隔中的每一个，确定与数据流相关联的参数的值。 根据参数的期望值计算与数据流相关的参数的确定值的偏差，并且如果计算的偏差高于阈值，则在收集的数据流中检测到异常。