| CPC H04L 41/0631 (2013.01) [H04L 41/065 (2013.01)] | 20 Claims |

|
1. A computer implemented method of monitoring a target system, the method comprising:
receiving information about anomalies in operation of the target system detected by an automated anomaly detection mechanism;
automatically determining certainty characteristics of the detected anomalies based on the received information;
submitting detected anomalies to expert evaluation in priority order determined based on the certainty characteristics, wherein detected anomalies with highest uncertainty are given highest priority; and
adjusting the determination of certainty characteristics of the detected anomalies and/or the automated anomaly detection mechanism based on results of the expert evaluation.
|