91 results about "Alert management" patented technology

There are provided systems and methods for automated alert deduplication or suppression in data processing systems based on recurring data identifiers. An entity, such as company or business, may utilize computing services provided by a service provider. When providing these services, one or more computing services, processors, or the like of the service provider's computing architecture may be used. Use of computing services may generate security alerts when computing events are flagged as risky, fraudulent, malicious, computing attacks, or the like. To automate security alert management, the service provider may utilize an alert management system that may parse and extract data from incoming security alerts and calculate identifiers from such data, such as by transforming or converting using identifier functions. Recurring identifiers may be automatically organized for suppression or deduplication based on past occurrence of such identifiers with other security alerts.

The present disclosure provides an artificial intelligence-based alarm management based on structured time series data and unstructured contextual information where the conventional methods fails to do. Initially, the system receives a user query associated with an industry automation system and classifies into one of a) data request query b) an anomaly detection and diagnosis query c) a log request query and d) feedback for previous response using a query classifier. Simultaneously, the user query is converted into an associated timeseries query representation. Furthermore, a plurality of database queries is generated based on the timeseries query representation using query generator. Further, data pertaining to the user query is retrieved from an associated database based on database queries using Deep Learning models, thereby identifying a critical alarm, and to take appropriate actions if there is any anomaly. Finally, the retrieved data is displayed to the user in a user readable format.

An alert broadcast system can receive a first alert message indicating an emergency from an alert management system. The first alert message generated by an emergency alert originator can include a unique identifier associated with the emergency. The alert broadcast system can forward the first alert message to a first group of wireless devices and cause each of the first group of wireless devices to temporarily store the unique identifier. The alert broadcast system can receive a second alert message, including the unique identifier from the alert management system. The alert broadcast system can forward the second alert message to a second group of wireless devices. The respective wireless device can perform an action based on a determination that the respective wireless device has received the first alert message prior to receiving the second alert message and that the second alert message is partly duplicative of the first alert message.

Systems and methods for facilitating electronic safety alert communications by a safety alert management system are disclosed herein. A method includes receiving an electronic safety alert for a specific safety event from a user electronic device via a safety alert application, the safety alert including at least one user message from a user associated with the user device. The method includes initiating an electronic chat session between the user and the safety agent attending the safety management application and, for at least one user message received at the safety management application, determining a reply message to send to the user device in response to the at least one user message. In embodiments, a machine learning model is used to analyze the user message and determine one or more recommended reply messages to display to the agent. A method for training a safety chat language model in a safety alert management system is also disclosed.

An information handling system receives a notification regarding a state of the information handling system, and determines an alert management policy associated with the notification regarding the state of the information handling system. The system also applies an alert management action to enforce the alert management policy.

A display system can be configured to identify a space object and an object alert associated with a change in one or more movement parameters of the space object. The system can generate data configured to display a display region and an object alert indicator within the display region. The system can display the object alert indicator at a location within the display region and display, within a second display region, a listing of a plurality of alerts comprising the object alert. The system can receive a user selection of an alert from the plurality of alerts configured to be displayed in the second display region and automatically generate updated data configured to display an updated display region based on the user selection of the alert. The updated display region can include a panned, rotated, and / or zoomed perspective of the display region.

Systems and methods for alert management. A method includes analyzing alerts with respect to cybersecurity issues indicated in the alerts to identify at least one group of matching alerts. Each group of matching alerts includes alerts generated by multiple cybersecurity detection tools. A software component associations database is queried based on software components indicated in each of the groups of alerts. The software component associations database stores associations between configuration files of software containers and build files used to build the software containers. At least one group of duplicate alerts is identified among the groups of matching alerts based on associations returned by the software component associations database. The software component indicated by a first alert of each group of duplicate alerts is associated with the software component indicated by a second alert of the group of duplicate alerts. The alerts are managed based on the groups of duplicate alerts.

There are provided systems and methods for automated alert deduplication or suppression in data processing systems based on recurring data identifiers. An entity, such as company or business, may utilize computing services provided by a service provider. When providing these services, one or more computing services, processors, or the like of the service provider's computing architecture may be used. Use of computing services may generate security alerts when computing events are flagged as risky, fraudulent, malicious, computing attacks, or the like. To automate security alert management, the service provider may utilize an alert management system that may parse and extract data from incoming security alerts and calculate identifiers from such data, such as by transforming or converting using identifier functions. Recurring identifiers may be automatically organized for suppression or deduplication based on past occurrence of such identifiers with other security alerts.

The invention discloses a system safety control system based on the Internet of Things technology, and relates to the technical field of safety control, and the system comprises a PLC control module, a sensing collection module, a cloud server and a safety monitoring module. And the sensing acquisition module monitors data in real time and transmits the data to the cloud server for storage and analysis, so that algorithm application security, network communication security and data storage security are evaluated, the security of the Internet of Things system is comprehensively evaluated, the integrity of system security monitoring and the comprehensiveness of Internet of Things data processing are ensured, and the security of the Internet of Things system is ensured. Network attacks aiming at the industrial control system are effectively defended through hierarchical design and model fusion, and industrial production continuity and data security are ensured; and deep analysis is carried out through the safety monitoring module to realize alarm management, so that the response efficiency of safety risks is improved, the abnormity repair timeliness and the continuous stability of the system are ensured, and the intelligent application level of the Internet of Things system is improved.

Various embodiments disclosed herein are directed to a system, method, apparatus, and / or a computer program product that are configured to embody an alert management system that is adapted to efficiently analyze and cluster different types of alerts (e.g., heterogenous alerts) including system generated alerts and user generated alerts. In one example, system generated alerts are analyzed using one or more tag based clustering algorithms while user generated alerts are analyzed using one or more machine learning clustering models. In another example, the alert management system may be configured to improve alert clustering efficiency by using tag based clustering algorithms on alerts that satisfy a tag presence threshold while machine-learning based clustering models are used on alerts that do not satisfy the tag presence threshold. In various embodiments, confidence metrics are calculated and used to reduce the number of false positive alert clusters and to improve alert cluster quality.

A system (100), method and computer program product are provided for determining an abnormal technical state of a technical system (200). The computer system (100) receives a plurality of signals from the technical system (200), wherein each signal (S1 to Sn) reflects a technical state of at least one system component. The system further retrieves a high alarm threshold (H1 to Hn) and a low alarm threshold (L1 to Ln) associated with the corresponding received signal (S1 to Sn) from an alarm management system (300). Signal values ​​within a range between the associated high alarm threshold and the associated low alarm threshold reflect normal operation of the corresponding system component. For each signal (S1), a univariate distance from its associated alarm threshold (H1 / L1) is calculated to quantify the degree of abnormality for the corresponding system component. An aggregate anomaly index (AAI) is calculated based on the univariate distance, which reflects the technical state of the entire technical system (200). A comparison of the aggregate anomaly index (AAI) with a predetermined anomaly threshold (AAT) is provided to an operator (10).

The present invention presents a method of assessing the quality of the burning of the gases in the flare and adjusting the vapor flow rate in a continuous way and with flexibility to integrate with different instrumentation topologies of the flare control system. The state of the flare flame is identified from an image set of the flame, classifying it into one of four: flame with excess vapor, optimized flame, flame with soot or images with insufficient information to classify them as one of the previous states of the flare flame. In addition, it is further able to quantify the height of the flame. The invention comprises the following components: flare, camera, image stream manager, edge computer, data historian, alert manager, information visualization panels, distributed digital control system, DDCS, and cloud storage and computing.

An alert management system and technique is provided. Substantially any diagnostic trouble code generates an alert regardless of severity. The operator is given an option to dismiss or suppress re-alert for a class of diagnostic trouble codes, such as low severity codes. Future notification of such codes can be disabled in response to a selection of the option provided. Device links for diagnostic trouble codes may be established in diagnostic definitions. The device links trigger inclusion of navigation links in displayed alerts to improve retrieval of related diagnostic information from secondary or dependent devices.

A system comprises a web-cloud security subsystem that hosts, manages, and analyzes data related to a plurality of hosted applications that provide at least one of physical access control, surveillance, alarm management, visitor management, and elevator management; at least one physical security subsystem that exchanges data with a corresponding hosted application of the web-cloud security subsystem; and a real-time control and monitoring device that provides secure access of the web-cloud security subsystem.

The alarm management device (10) stores each attribute of messages indicating the same or similar content and an internal attribute indicating the same or similar content in an associated manner for each type of alarm device (20) that outputs the messages, and upon receiving a message from the alarm device (20), transmits the message to the alarm device (20). An internal attribute associated with an attribute included in the received message is acquired from the storage unit, an internal message in which the attribute of the message is converted into the internal attribute is generated, and the internal message is output.

1. The name of the design product: network threat visualization analysis graphical user interface for electronic device. 2. The use of the design product: for electronic device running program, and the electronic device can be a display screen panel. 3. The design points of the design product: in the graphical user interface content. 4. The picture or photo that best indicates the design points: front view. 5. The display screen panel is an existing design, and the rear view, left view, right view, top view and bottom view are omitted. 6. The use of the graphical user interface: for visualizing and displaying the network threats obtained through real-time monitoring. 7. The human-computer interaction mode of the graphical user interface: click the "alarm management" option in the front view, and the interface jumps to the interface change state diagram; the front view reference diagram is the reference interface of the front view, and the interface change state reference diagram is the reference interface of the interface change state diagram; "X" in the above interface represents the text content that can be changed according to actual needs.

Embodiments receive a data metrics input which corresponds with a microservice issue, determine a final outcome by multiplying each metric of the data metrics input by a weight, determine a link output based on the final outcome, determine a cost function based on the link output, evaluate that a cost output of the cost function has a minimized error, output a data metrics output based on the cost output of the cost function having the minimized error, train at least one machine learning (ML) model using the data metrics output, receive a new data metrics input which corresponds with another microservice issue, and provide a recommendation corresponding to the new data metrics input using the trained at least one ML model.

Techniques for optimizing driving alerts provided by a computing device are presented herein. In some techniques, a driving alert management server system transmits an initial set of alert rules to a driver safety application executing on a computing device and receives an alert history from the application including alerts provided to a user in response to detecting occurrences of one or more types of driving events according to the initial set of alert rules. A likelihood that the user will disable future alerts is generated by executing a user-churn machine learning model on the alert history and compared to predefined churn threshold criteria. Based on the comparison, the initial alert rules are modified to generate a new set of alert rules that optimize the likelihood, and the new set of alert rules are transmitted to the application.

The invention discloses a chemical laboratory safety experiment management system based on big data analysis. The system comprises a data analysis platform, a data monitoring and acquisition module, an experiment safety management module, an alarm prompt module, a control module and a data storage module. The data analysis platform is responsible for cleaning, converting and filing original data; the data monitoring and acquisition module realizes data interaction through a built-in API data interface, and realizes real-time data monitoring through carrying a wireless network; the experiment safety management module is responsible for managing and controlling equipment, chemical experiment products and experimenters in the chemical laboratory; the alarm prompting module supports a multi-level alarm management mechanism; the control module is used for controlling and managing equipment in the laboratory in real time according to the alarm information sent by the alarm prompt module; and the data storage module is responsible for recording operation data among the modules. According to the method, lean management of the experiment safety of the chemical laboratory can be realized, and the safety of the experiment process is ensured.

Techniques for user impact potential based security alert management in computer systems are disclosed. One example technique includes receiving an alert indicating that a security rule has been violated by a user. The example technique can also include, in response to receiving the data representing the alert, determining an impact score of the user based on the profile of the user. The impact score represents a deviation of an assigned value to the profile of the user and a mean value of assigned values of profiles of all users in the organization. The example technique can further include calculating a ranking value of the alert in relation to other alerts based on the determine impact score and other impacts scores corresponding to the other alerts and selectively surfacing the alert to a system analyst based on the calculated ranking value in relation to other alerts.

Various embodiments disclosed herein are directed to a system, method, apparatus, and / or a computer program product that are configured to programmatically analyze alert clusters and make recommendations to alert managers as to alert policy changes that might reduce alert volume without hindering the intended performance of the alert management system. For example, various embodiments are configured to programmatically determine if a threshold number of alerts within an alert cluster are insignificant and output an alert policy change recommendation interface that is configured to allow alert mangers to execute adjustments to underlying alert policies. In some embodiments, alert policy changes are recommended only when a threshold number of alerts within an alert cluster are insignificant and such threshold number of alerts are determined to be increasing within the monitored software application framework.

Electronic installation and decision support method with enhanced energy alert management, aircraft and associated computer program This electronic installation (15) for decision support of an aircraft operator (10) includes a display system (18) and a flight management system (20).The flight management system (20) includes: + a low-power alert module (30) that activates if the remaining power is estimated to be insufficient for a current flight plan; the alert module (30) inhibits the alert for a time delay from the moment the remaining power is estimated to be insufficient, with the alert being issued only when the time delay has elapsed; + a display module (32) for displaying information about the alert on the display system (18); + a module (34) for calculating the aircraft's (10) range; + a module (36) for detecting if the aircraft (10) is climbing; and + a modification module (38) that increases the time delay if the calculated range exceeds a threshold and the aircraft (10) is climbing. (See Figure 1 for abbreviations.)

A vehicle alert management system that manages alert lights and tones in accordance with vehicle speed and other inputs is described. The vehicle alert management system is configured so that in use the alert management system attenuates an alert lamp or click or tone after a selected time interval if the system detects that vehicle speed is below a selected speed or within a selected threshold, or if the system detects no change outside a threshold speed range, or other suitable speed algorithm. The system in embodiments is configured to attenuate the in-vehicle cabin sound associated with a direction indicator on a vehicle so that it is inhibited after a selected time period, and allowed to play in the cabin after the vehicle speed moves out of a selected threshold range.

A medical device (1A-1E, 2) comprising: a communication interface (10, 20) communicatively coupled with another device (2, 1A-1E) or communicatively coupled with another device (2, 1A-1E); and a controller (11, 21) configured to selectively operate in one of a plurality of predetermined alarm modes wherein the controller (11, 21) is further configured to: determine in which of a plurality of predetermined operational settings (A-E) the medical device (1A-1E, 2) is operating; determining a quality of service of a communication with the other device (2, 1A-1E) via the communication interface (10, 20); selecting one of a plurality of predetermined alarm modes based on the determined operational settings (A-E) and the determined quality of service; and operating the medical device (1A-1E, 2) in the selected alarm mode.

A real-time network monitoring and anomaly detection system comprising a) a data collection module configured to collect network traffic data from one or more network nodes; b) a data processing module configured to normalise and extract features from the collected data; c) an anomaly detection module that uses statistical methods and / or machine learning models to detect anomalous network behavior; (d) a real-time visual dashboard configured to display network activity and detected anomalies through interactive graphical elements; and (e) an alert management module configured to generate notifications based on anomaly detection results, f) wherein the system is further configured to adaptively improve the recognition accuracy based on user feedback and system learning.

Embodiments provide an alert management and real-time verification system. The system obtains an electronic file that includes a cashier's check data structure comprising cashier's check information for one or more cashier's checks presented at a first institution. The system automatically parses the cashier's check information into one or more cashier's check events according to routing numbers in the cashier's check information. The system sends an electronic verification request message to each second institution identified by one of the routing numbers. The electronic verification request message includes an account number and an amount of the corresponding cashier's check. On receiving a response to the message, the system determines, based on the electronic verification response message, whether the cashier's check has been verified, and sends an electronic response message to the first institution that indicates whether the cashier's check has been verified.

Embodiments of the invention relate generally to the field of content distribution platforms, and more particularly, to systems, methods, and apparatuses for implementing a consumer data aggregation platform for seamless product recall and consumer alert management. For example, according to one embodiment there is a method performed by a consumer data aggregation platform having at least a processor and a memory therein being configurable to perform operations including: receiving product-related data at a database system communicably interfaced with a consumer data aggregation platform; receiving sales data at the database system identifying a consumer via a unique UserID identifying the consumer and a list of associated products purchased by the consumer; storing the product-related data and the sales data as distinct datasets in separate tables within a database system of the consumer aggregation platform; receiving a recall notification request to issue a product recall for a specified consumer product represented within the datasets of the consumer data aggregation platform; querying the datasets of the consumer data aggregation platform to identify records for each one of: (i) the specified consumer products, and (ii) consumers associated with transactions based on the specified consumer aggregation platform; extracting records for the specified consumer products and contact information for consumers associated with transactions based on the specified consumer product across the distinct datasets of the consumer data aggregation platform; joining the extracted records for the specified consumer product and contact information for consumers associated with transactions based on the specified consumer product into a single data set; and issuing the product recall by sending a push notification to consumers associated with transactions based on the specified consumer product.

Novel tools and techniques are provided for implementing real-time fault management or real-time fault management system (“RFM”). In various embodiments, RFM may receive alerts from or associated with network devices (e.g., layer 2, 3, and / or 4 devices, or the like) that are disposed in a plurality of disparate networks that may utilize different alert management protocols and / or different fault management protocols. RFM may collect, enrich, normalize, aggregate, and display the alerts in a user interface to facilitate addressing of the alerts by a user. To enable continuous and real-time functionality, RFM may be implemented in a plurality of siloed platforms in a primary data center, with processing of alerts being load balanced across the siloed platforms, with mirrored group of siloed platforms in a secondary data center located geographically distant from the primary data center and configured to be on “hot standby” and to completely take over RFM processing operations.

Systems and computer-implemented methods for generating, propagating and handling alert messages on a blockchain network. The alert messages may be generated and sent by an alert administration service to instruct mining nodes to take certain actions, including freezing a transaction outpoint, banning a peer node, invalidating a block, or implementing a confiscation transaction to move assets from a transaction outpoint to another address. An alert handler within the node software at the mining nodes manages the parsing and processing of alerts. Alerts may be sent in P2P message that includes a serialized alert transaction that itself includes the alert message in an output field. A processed alert message results in the alert transaction being included in the mempool and, eventually, the blockchain.