Anomaly detection in event-based systems using image processing

Abstract

At least one processor may capture a plurality of image snapshots containing information about a monitored system at a plurality of sequential times, each snapshot having the same vertical and horizontal dimensions. The processor may label the plurality of image snapshots as indicative of an event that took place in the monitored system, may receive additional data describing the event, may cluster the labeled plurality of image snapshots and the additional data using at least one machine learning clustering algorithm, and may merge the clustered plurality of image snapshots and the clustered additional data into merged data. The processors may create a model by processing the merged data using at least one neural network, the model being configured to detect future events of a same type as the event in the monitored system. The processor may store the model in a memory in communication with the processor.