| CPC H04L 63/1425 (2013.01) [H04L 43/04 (2013.01); H04L 43/062 (2013.01); H04L 43/065 (2013.01); H04L 43/0817 (2013.01); H04L 63/20 (2013.01)] | 24 Claims |
|
1. A device, comprising:
processing circuitry; and
a memory including instructions that, when executed on the processing circuitry, cause the device to:
classify a datastream as having discrete values or sinusoidal values that comply with discrete data stream characteristics or sinusoidal data stream characteristics, respectively, produced by different sensor types;
select, for the datastream, an anomaly detection algorithm from a plurality of anomaly detection algorithms that comprises a discrete model in view of the discrete data stream characteristics or a sinusoidal model in view of the sinusoidal data stream characteristics;
populate parameters for the anomaly detection algorithm from other data characteristics that are different from the discrete data stream characteristics or the sinusoidal data stream characteristics;
output an anomaly score from the anomaly detection algorithm;
determine, for the datastream, an anomaly threshold based on the anomaly score; and
when the anomaly score exceeds an anomaly threshold, generate an indication that a sensor associated with the datastream is acting anomalously.
|