Search International and National Patent Collections

1. (WO2018178034) ANOMALY DETECTION FOR COMPUTER SYSTEMS

Pub. No.:    WO/2018/178034    International Application No.:    PCT/EP2018/057685
Publication Date: Fri Oct 05 01:59:59 CEST 2018 International Filing Date: Tue Mar 27 01:59:59 CEST 2018
IPC: G06F 21/55
Applicants: BRITISH TELECOMMUNICATIONS PUBLIC LIMITED COMPANY
Inventors: DANIEL, Joshua
DU, Xiaofeng
Title: ANOMALY DETECTION FOR COMPUTER SYSTEMS
Abstract:
A computer implemented method to detect a computer system in execution operating in a manner that is not compliant with a definition of a set of compliant operations, the method comprising: receiving a first set of records for the computer system, each record detailing an occurrence in the computer system during a first predetermined time period; generating a sparse distributed representation of the set of records to form a training set for a hierarchical temporal memory (HTM); training the HTM based on the training set in order that the trained HTM provides a model of the operation of the computer system during the predetermined time period; selecting at least a subset of operations in the set of compliant operations and causing the invocation of each operation of the subset in the computer system over a second predetermined time period to generate a second set of records of occurrences in the computer system; generating a sparse distributed representation of the set of records to form an input set for the trained HTM; executing the trained HTM based on the input set to determine a degree of recognition of the records of the input set; and responsive to a determination that a degree of recognition of one or more records of the input set is below a threshold degree, identifying the operation of the computer system as non-compliant.