Siemens Aktiengesellschaft

Dominik Dold

Marcel Hildebrandt

Mitchell Joblin

Yushan Liu

For anomaly detection in a network, a temporal knowledge graph represents the network including interactions between network modules with a set of entities, a set of relations, and a set of timestamps. In a first step, temporal random walks are sampled from the temporal knowledge graph. These are transformed in a second step into temporal logical rules. After observing an event in the network—or in a different network—the observed event is classified in a third step regarding an anomaly, using the temporal logical rules. The temporal knowledge graph is used as a stream-based data structure to extract rules that identify typical temporal behavior of the network and is used to identify anomalies in a human-interpretable way. The anomaly detection task is framed as a quadruple classification problem, using the temporal logical rules and their respective groundings in the temporal knowledge graph to support the classification.

Growing community of inventors

Leiden, Netherlands

Dominik Dold