Method and device for ascertaining anomalies in a communications network

Abstract

A method for ascertaining an anomaly in a communications network. In a first phase, a discriminator is trained to recognize whether messages transmitted over the communications network are indicative of the anomaly existing; during training, normal data and artificial data produced by a generator are fed to the discriminator, and, in response, the discriminator is trained to recognize that normal data being fed thereto connotes no anomaly, and artificial data being fed thereto connotes an anomaly. In a second phase, the generator is trained to produce artificial data which, when fed to the discriminator, are classified with the greatest possible probability as normal data. In a third phase, contents of messages received over the communications network are fed as an input variable to the discriminator; an output variable is ascertained, and the decision as to whether the anomaly exists or not being made as a function of the output variable.