Hewlett Packard Enterprise Development LP

Unum Sarfraz

Mohan Parthasarathy

Brijesh Nambiar

Min-Yi Shen

Viswesh Ananthakrishnan

Systems and methods are provided for managing false positives in a network anomaly detection system. The methods may include receiving a plurality of anomaly reports; extracting fields, and values for the fields, from each of the anomaly reports; grouping the anomaly reports into a plurality of groups according to association rule learning, wherein each group is defined by a respective rule; for each group, creating a cluster based on common values for the fields; and marking each cluster as a possible false positive anomaly cluster.

Growing community of inventors

Santa Clara, CA, United States of America

Unum Sarfraz