Anomaly detection method and device

An anomaly detection and abnormal state technology, applied in the field of anomaly detection, can solve problems such as false positives or missed negatives

Active Publication Date: 2017-08-22
BEIJING QIYI CENTURY SCI & TECH CO LTD
View PDF10 Cites 54 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] In order to solve the problem of false positives or missed negatives when using a fixed alarm threshold for abnormal detection, an embodiment of the present invention provides an abnormal detection method and device

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Anomaly detection method and device
  • Anomaly detection method and device
  • Anomaly detection method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0054] An anomaly detection method provided by an embodiment of the present invention is introduced in detail.

[0055] refer to figure 1 , which shows a flow chart of the steps of an abnormality detection method in an embodiment of the present invention, which may specifically include the following steps:

[0056] Step 101, collect the current actual value of the baseline flow.

[0057] In the system operation and maintenance, by detecting the abnormal state of the target traffic monitored by the system and sending an alarm to the system operation and maintenance personnel, the maintenance of the system by the system operation and maintenance personnel is realized.

[0058]In the embodiment of the present invention, the baseline traffic may reflect real user behavior. The real user behavior refers to the behavior that cannot be simulated by a computer. During the collection process of the baseline traffic, there is no malicious forgery of the traffic. For example, the basel...

Embodiment 2

[0074] An anomaly detection method provided by an embodiment of the present invention is introduced in detail.

[0075] refer to figure 2 , which shows a flow chart of the steps of an abnormality detection method in an embodiment of the present invention, which may specifically include the following steps:

[0076] Step 201, collect the current actual value of the baseline flow.

[0077] In the system operation and maintenance, by detecting the abnormal state of the target traffic monitored by the system and sending an alarm to the system operation and maintenance personnel, the maintenance of the system by the system operation and maintenance personnel is realized.

[0078] In the embodiment of the present invention, the baseline traffic may reflect real user behavior. The real user behavior refers to the behavior that cannot be simulated by a computer. During the collection process of the baseline traffic, there is no malicious forgery of the traffic. For example, the bas...

Embodiment 3

[0114] An abnormality detection device provided by an embodiment of the present invention is introduced in detail.

[0115] refer to Figure 4, shows a block diagram of an abnormality detection device in an embodiment of the present invention.

[0116] The abnormality detection device 400 of the embodiment of the present invention includes:

[0117] The functions of each module and the interaction between each module are introduced in detail below.

[0118] The first collection module 401 is configured to collect the current actual value of the baseline flow.

[0119] The second collection module 402 is configured to collect the current actual value of the target flow.

[0120] The prediction module 403 is configured to predict the predicted value of the target flow at the current moment according to the actual value of the baseline flow at the previous moment, the actual value of the baseline flow at the current moment, and the actual value of the target flow at the previo...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides an anomaly detection method and device and relates to the technical field of anomaly detection. The method comprises the following steps of: acquiring the current-time actual value of a baseline flow; acquiring the current-time actual value of a target flow; predicting the current-time predicted value of target flow according to the previous-time actual value of the baseline flow, the current-time actual value of the baseline flow, and the previous-time actual value of the target flow; calculating a current-time prediction error value according to the current-time actual value and the current-time predicted value of the target flow; calculating upper and lower threshold values based on a historical prediction error value; and detecting whether the current-time actual value of the target flow is in an abnormal state based on the current-time prediction error value and the upper and lower threshold values. The method and device calculate the upper and lower threshold values by using the historical prediction error value, detect the abnormal state of the current-time actual value of the target flow, realize a purpose of detecting the anomaly based on the dynamic upper and lower threshold values, and reduce the false alarm rate generated during anomaly detection.

Description

technical field [0001] The invention relates to the technical field of anomaly detection, in particular to an anomaly detection method and an anomaly detection device. Background technique [0002] With the continuous development of anomaly detection technology, system operation and maintenance technology has also been widely used. In the system operation and maintenance, by detecting the key performance indicators of the monitoring, the abnormality is found in time and an alarm is sent to the system operation and maintenance personnel, so as to realize the abnormal identification of the monitored performance indicators. [0003] At present, abnormality detection in performance index monitoring is mainly realized by operation and maintenance personnel setting a fixed alarm threshold. When the monitored performance index exceeds the alarm threshold, the system judges it as abnormal and sends an alarm reminder. [0004] In the existing technology, on the one hand, the time se...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/26H04L12/24
CPCH04L41/0681H04L43/0876H04L43/16
Inventor 宗志远
Owner BEIJING QIYI CENTURY SCI & TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap