Unlock instant, AI-driven research and patent intelligence for your innovation.

Information processing apparatus, information processing method, and program

An information processing device and information analysis technology, which are applied in the fields of information processing devices, information processing and programs, can solve the problems of not having means for managing the order of occurrence, and being unsuitable for recording monitoring objects.

Active Publication Date: 2012-01-11
MITSUBISHI ELECTRIC CORP
View PDF4 Cites 5 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] However, the structure of these information does not have means to manage the order of occurrence, so it is not suitable for requests such as adding monitoring objects within a certain period of time.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Information processing apparatus, information processing method, and program
  • Information processing apparatus, information processing method, and program
  • Information processing apparatus, information processing method, and program

Examples

Experimental program
Comparison scheme
Effect test

Embodiment approach 1

[0070] In this embodiment and the following embodiments, in the data structure that manages the state change (behavior) due to the occurrence of an event as a data model with a graph (graph) structure, from the event ID and the object ID The search condition expression generated by the appearance pattern is transformed into an equivalent search automaton (automaton), and the state transition table generated by the automaton is used to judge whether it is an accepting state and whether it is an equivalent object, so that the behavior that was difficult in the past can be Realize the structure of retrieval based on complex retrieval conditions in the retrieval.

[0071] In addition, when a branch occurs in an action, a structure that enables efficient search without performing repeated search will be described.

[0072] Furthermore, for example, when it is necessary to track with another point of view by embedding components into a product during the manufacturing process, the r...

Embodiment approach 2

[0190] In this embodiment, an example applied to a search of the action index 103 having branch nodes will be described. The configuration diagram of the search device 100 is the same as that of the first embodiment, and is figure 1 .

[0191] Figure 14 An example of a search condition expression 1401 , a state transition diagram 1402 , and an action index 1403 in the case of performing the file operation mode described in Embodiment 2 is shown.

[0192] The search object is a file, and the number of cases belonging to the file category is three, namely "file A", "file B", and "file C".

[0193] A file is characterized in that it has a branch node because it is copied by a copy event or the like, and the merge branch node processing unit 109 performs branch processing.

[0194] In the retrieval conditional expression 1401, it is indicated that a document printed after copying is retrieved.

[0195] exist Figure 14 In the action index 1403 of , the only file example in w...

Embodiment approach 3

[0249]In this embodiment, an example applied to the search of the behavior index 103 having merged nodes will be described. The configuration diagram of the search device 100 is the same as that of the first embodiment, and is figure 1 .

[0250] In the manufacturing process log, together with the branching described in Embodiment 2, a combination of behaviors caused by the blending process of raw materials and the like is observed.

[0251] Figure 22 A search condition expression 2101, a state transition diagram 2102, and an action index 2103 are shown, taking manufacturing process logs as an example.

[0252] Action 2105 is a merge node where multiple actions are merged.

[0253] In addition, the route action 2104 is the first action in each traced route.

[0254] In this example, material B is an example of a material that has a pattern in which the order of occurrence of events that matches the specified search condition expression 2101 exists.

[0255] Figure 23 I...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

A behavior index indicates a development of occurrence of events included in log data by a connection of a plurality of nodes, and includes a branching node connecting to two or more subsequent nodes and an integrating node connected to two or more preceding nodes. When a regular expression converting part inputs a search condition indicating an event appearance order from a client, a search automaton retaining part generates a state transition table in accordance with the search condition. While a node type determining part determines the node types of the respective nodes of the behavior index, a state evaluating part analyzes the respective nodes to determine the states of the respective nodes, and determines whether or not a state transition pattern matches the state transition table. Regarding a branching node, the respective nodes of each of branching routes branching from the branching node are analyzed. Regarding an integrating node, the respective nodes of each of upstream routes merging into the integrating node are analyzed.

Description

technical field [0001] The present invention relates to a system for efficient and high-speed retrieval by specifying occurrence patterns of events and the like based on sequence information included in logs. Background technique [0002] Based on the log data collected and accumulated mainly in the fields of information security, network monitoring, and equipment management, there is a growing tendency to monitor the history of information leakage, illegal access, equipment failure, etc., and improve the management of information, networks, and equipment. [0003] For this purpose, it is necessary to collect the historical data of the monitoring target and track the behavior of the target within a certain period of time. [0004] In the history data, operation information such as a monitoring target identification ID, a time stamp, and an event is recorded. [0005] However, the structure of these information does not have means for managing the order of occurrence, so it ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): G06F17/30
CPCG06F17/30G06F21/552G06F17/40
Inventor 平井规郎郡光则
Owner MITSUBISHI ELECTRIC CORP