The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
May. 14, 2019

Filed:

Jan. 31, 2017
Applicant:

Nec Laboratories America, Inc., Princeton, NJ (US);

Inventors:

Wei Cheng, Plainsboro, NJ (US);

Kai Zhang, Monmouth Junction, NJ (US);

Haifeng Chen, West Windsor, NJ (US);

Guofei Jiang, Princeton, NJ (US);

Assignee:

NEC Corporation, Tokyo, JP;

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 11/00 (2006.01); G06F 11/07 (2006.01); G06N 20/00 (2019.01);
U.S. Cl.
CPC ...
G06F 11/079 (2013.01); G06F 11/0709 (2013.01); G06F 11/0751 (2013.01); G06N 20/00 (2019.01); G06F 2201/805 (2013.01); G06F 2201/81 (2013.01);
Abstract

A method is provided for root cause anomaly detection in an invariant network having a plurality of nodes that generate time series data. The method includes modeling anomaly propagation in the network. The method includes reconstructing broken invariant links in an invariant graph based on causal anomaly ranking vectors. Each broken invariant link involves a respective node pair formed from the plurality of nodes such that one of the nodes in the respective node pair has an anomaly. Each causal anomaly ranking vector is for indicating a respective node anomaly status for a given one of the plurality of nodes when paired. The method includes calculating a sparse penalty of the casual anomaly ranking vectors to obtain a set of time-dependent anomaly rankings. The method includes performing temporal smoothing of the set of rankings, and controlling an anomaly-initiating one of the plurality of nodes based on the set of rankings.


Find Patent Forward Citations

Loading…