Nec Corporation

Zhengzhang Chen

Haifeng Chen

LuAn Tang

Zhichun Li

Guofei Jiang

Wei Cheng

Kenji Yoshihira

Zhenyu Wu

Junghwan Rhee

Yuncong Chen

Kangkook Jee

Ding Li

Jumpei Kamimura

Liang Tong

Dongjie Wang

Yuji Kobayashi

Bo Zong

Jiaping Gui

Cheng Cao

Xiao Yu

Kai Zhang

Shen Wang

Yuxiang Ren

Hengtong Zhang

Cristian Lumezanu

Masanao Natsumeda

Jingchao Ni

Wenchao Yu

Takehiko Mizoguchi

Xuchao Zhang

Yanchi Liu

Chung Hwan Kim

Denghui Zhang

Wajih Ul Hassan

Chen Luo

Ying Lin

Ziqiao Zhou

Lei Cai

Pengyang Wang

Yue Li

Zexue He

Zichun Li

Boxiang Dong

Methods and systems for anomaly detection include determining whether a system is in a stable state or a dynamic state based on input data from one or more sensors in the system, using reconstruction errors from a respective stable model and dynamic model. It is determined that the input data represents anomalous operation of the system, responsive to a determination that the system is in a stable state, using the reconstruction errors. A corrective operation is performed on the system responsive to a determination that the input data represents anomalous operation of the system.

Anomaly detection on dynamic sensor data

A method for vehicle fault detection is provided. The method includes training, by a cloud module controlled by a processor device, an entity-shared modular and a shared modular connection controller. The entity-shared modular stores common knowledge for a transfer scope, and is formed from a set of sub-networks which are dynamically assembled for different target entities of a vehicle by the shared modular connection controller. The method further includes training, by an edge module controlled by another processor device, an entity-specific decoder and an entity-specific connection controller. The entity-specific decoder is for filtering entity-specific information from the common knowledge in the entity-shared modular by dynamically assembling the set of sub-networks in a manner decided by the entity specific connection controller.

Modular network based knowledge sharing for multiple entities

A computer-implemented method for detecting trigger points to identify root cause failure and fault events is provided. The method includes collecting, by a monitoring agent, entity metrics data and system key performance indicator (KPI) data, integrating the entity metrics data and the KPI data, constructing an initial system state space, detecting system state changes by calculating a distance between current batch data and an initial state, and dividing a system status into different states.

Trigger point detection for online root cause analysis and system fault diagnosis

A computer-implemented method for identifying attack origins is provided. The method includes detecting a trigger point from entity metrics data and key performance indicator (KPI) data, generating a learned causal graph by fusing a state-invariant causal graph with a state-dependent causal graph, backtracking from an attack detection point, via an incident backtrack and system recovery component, by using the learned causal graph to identify an attack origin when an intrusion or attack occurs, and displaying data relating to the attack origin on a visualization display for user analysis.

Incremental causal graph learning for attack forensics in computer systems

A computer-implemented method for locating root causes is provided. The method includes detecting a trigger point from entity metrics data and key performance indicator (KPI) data, generating a learned causal graph by fusing a state-invariant causal graph with a state-dependent causal graph, and locating the root causes by employing a random walk-based technique to estimate a probability score for each of the entity metrics data by starting from a KPI node.

Disentangled graph learning for incremental causal discovery and root cause analysis

Systems and methods for data fusion and analysis of vehicle sensor data, including receiving a multiple modality input data stream from a plurality of different types of vehicle sensors, determining latent features by extracting modality-specific features from the input data stream, and aligning a distribution of the latent features of different modalities by feature-level data fusion. Classification probabilities can be determined for the latent features using a fused modality scene classifier. A tree-organized neural network can be trained to determine path probabilities and issue driving pattern judgments, with the tree-organized neural network including a soft tree model and a hard decision leaf. One or more driving pattern judgments can be issued based on a probability of possible driving patterns derived from the modality-specific features.

Data fusion and analysis engine for vehicle sensors

A computer-implemented method for multi-model representation learning is provided. The method includes encoding, by a trained time series (TS) encoder, an input TS segment into a TS-shared latent representation and a TS-private latent representation. The method further includes generating, by a trained text generator, a natural language text that explains the input TS segment, responsive to the TS-shared latent representation, the TS-private latent representation, and a text-private latent representation.

Co-disentagled series/text multi-modal representation learning for controllable generation

A computer-implemented method for identifying root cause failure and fault events is provided. The method includes detecting a trigger point, converting, via an encoder, previous system state data, new batch data in a next system state, and a causal graph to system state-invariant embeddings and system state-dependent embeddings, generating a learned causal graph, via a graph generation layer, by integrating state-invariant and state-dependent information, and predicting, by a prediction layer, future time-series data on the learned causal graph.

Incremental causal discovery and root cause localization for online system fault diagnosis

A method for early warning is provided. The method clusters normal historical data of normal cars into groups based on the car subsystem to which they belong. The method extracts (i) features based on group membership and (ii) feature correlations based on correlation graphs formed from the groups. The method trains an Auto-Encoder and Auto Decoder (AE&AD) model based on the features and the feature correlations to reconstruct the normal historical data with minimum reconstruction errors. The method reconstructs, using the trained AE&AD model, historical data of specific car fault types with reconstruction errors, normalizes the reconstruction errors, and selects features of the car faults with a top k large errors as fault signatures. The method reconstructs streaming data of monitored cars using the trained AE&AD model to determine streaming reconstruction errors, comparing the streaming reconstruction errors with the fault signatures to predict and provide alerts for impending known faults.

Vehicle intelligence tool for early warning with fault signature

Methods and systems for evaluating and enhancing a neural network model include constructing a surrogate model that corresponds to a target neural network model, based on a degree of knowledge about the target neural network model. Adversarial attacks against the surrogate model are generated, based on an attack goal, a level of attacker capability, and an attack model. The target neural network model is tested for accuracy under the generated adversarial attacks to determine a degree of robustness of the target neural network. Robustness of the target neural network model is enhanced by replacing facial occlusions in input images before applying the input images to the target neural network.

Robustness assessment for face recognition

A method for system metric prediction and influential events identification by concurrently employing metric logs and event logs is presented. The method includes concurrently modeling multivariate metric series and individual events in event series by a multi-stream recurrent neural network (RNN) to improve prediction of future metrics, where the multi-stream RNN includes a series of RNNs, one RNN for each metric and one RNN for each event sequence and modeling causality relations between the multivariate metric series and the individual events in the event series by employing an attention mechanism to identify target events most responsible for fluctuations of one or more target metrics.

Causal attention-based multi-stream RNN for computer system metric prediction and influential events identification based on metric and event logs

A method for employing a unified semi-supervised deep learning (DL) framework for turbulence forecasting is presented. The method includes extracting historical and forecasted weather features of a spatial region, calculating turbulence indexes to fill feature cubes, each feature cube representing a grid-based 3D region, and building an encoder-decoder framework based on convolutional long short-term memory (ConvLSTM) to model spatio-temporal correlations or patterns causing turbulence. The method further includes employing a dual label guessing component to dynamically integrate complementary signals from a turbulence forecasting network and a turbulence detection network to generate pseudo-labels, reweighing the generated pseudo-labels by a heuristic label quality detector based on KL-Divergence, applying a hybrid loss function to predict turbulence conditions, and generating a turbulence dataset including the predicted turbulence conditions.

Semi-supervised deep model for turbulence forecasting

Systems and methods for predicting road conditions and traffic volume is provided. The method includes generating a graph of one or more road regions including a plurality of road intersections and a plurality of road segments, wherein the road intersections are represented as nodes and the road segments are represented as edges. The method can also include embedding the nodes from the graph into a node space, translating the edges of the graph into nodes of a line graph, and embedding the nodes of the line graph into the node space. The method can also include aligning the nodes from the line graph with the nodes from the graph, and optimizing the alignment, outputting a set of node and edge representations that predicts the traffic flow for each of the road segments and road intersections based on the optimized alignment of the nodes.

Flexible edge-empowered graph convolutional networks with node-edge enhancement

Methods and systems for detecting and responding to an intrusion in a computer network include generating an adversarial training data set that includes original samples and adversarial samples, by perturbing one or more of the original samples with an integrated gradient attack to generate the adversarial samples. The original and adversarial samples are encoded to generate respective original and adversarial graph representations, based on node neighborhood aggregation. A graph-based neural network is trained to detect anomalous activity in a computer network, using the adversarial training data set. A security action is performed responsive to the detected anomalous activity.

Anomaly detection with graph adversarial training in computer systems

A computer-implemented method for graph structure based anomaly detection on a dynamic graph is provided. The method includes detecting anomalous edges in the dynamic graph by learning graph structure changes in the dynamic graph with respect to target edges to be evaluated in a given time window repeatedly applied to the dynamic graph. The target edges correspond to particular different timestamps. The method further includes predicting a category of each of the target edges as being one of anomalous and non-anomalous based on the graph structure changes. The method also includes controlling a hardware based device to avoid an impending failure responsive to the category of at least one of the target edges.

Growing community of inventors

Princeton Junction, NJ, United States of America

Zhengzhang Chen