996 results about "Classification rule" patented technology

A signature based intrusion detection method and system are disclosed. A method for detecting intrusions on a network generally comprises storing signature profiles identifying patterns associated with network intrusions in a signature database and generating classification rules based on the signature profiles. Data packets transmitted on the network and having corresponding classification rules are classified according to generated classification rules. Classified packets are forwarded to a signature engine for comparison with signature profiles.

A system and method for data flow classification based on a configurable rule-engine, is presented herein. In accordance with an embodiment of the invention, the system includes a data flow managing mechanism configured to identify, track, and manage the data flows and a rule set, which includes a plurality of rules for comparing information contained within data flow with pre-specified values. The system also includes a configurable classification rule engine for classifying the data flows into one of a plurality of traffic classes based on results of the comparisons. The configurable classification rule engine is configured via a configuration file that specifies and allows for the modification and reconfiguration of the pre-specified values and information regarding the data flows, the rule set, and the traffic classes.

A data management service identifies sensitive data stored on enterprise databases according to record classification rules that classify a data record as having a sensitive data type if the data record includes fields matching at least one of the record classification rules. Methods and systems rely on a set of impact factors each having a set of set of value bands representing a range for the impact factor and a corresponding value (between 0 and 1). The factors, ranges, and values all are customizable for an organization. Impact scoring calculations take into account each of the impact factors, and each is weighted to represent a specific risk perception or assessment type. A similar impact scoring is applied to data quality using volume of data as a key attribute of the quality.

A method implemented by a network element (NE), comprising receiving a classification message comprising a classification rule for identifying a service function chain (SFC) in a network, wherein the SFC comprises an ordered set of service functions (SFs) that provides services to an application, and a dynamic application-specific contextual data associated with an operation of the application, receiving a first of a plurality of application data packets, determining that the first of the application data packets matches the classification rule, generating a first SFC packet by adding the dynamic application-specific contextual data to the first of the application data packets according to the classification rule to enable communication of the dynamic application-specific contextual data to at least one of the SFs in the SFC, and sending the first SFC packet towards a next NE according to an SF path in the network associated with the SFC.

A method for preventing or limiting the effects of Denial-of-Service attacks in a communication appliance having a packet-classification rule base which allows all legitimate packets to be forwarded to the communication appliance includes monitoring incoming packets to the communication appliance to determine whether conditions indicating a Denial-of-Service attack are present. If a Denial-of-Service attack is present, a rule base subset of the packet-classification rule base is selected from a plurality of rule base subsets based on a current one of a plurality of operating states of the communication appliance.

A gateway device includes a network interface connected to data sources, and computer instructions, that when executed cause a processor to access data portions from the data sources. The processor accesses classification rules, which are configured to classify a data portion of the plurality of data portions as sensitive data in response to the data portion satisfying the rule. Each rule is associated with a significance factor representative of an accuracy of the classification rule. The processor applies each of the set of classification rules to a data portion to obtain an output of whether the data is sensitive data. The output are weighed by significance factors to produce a set of weighted outputs. The processor determines if the data portion is sensitive data by aggregating the set of weighted outputs, and presents the determination in a user interface. Security operations may also be performed on the data portion.

The invention provides a terminal application program classifying method. The method comprises the following steps: 102, receiving a classification rule of an application program; 104, acquiring type information of the application program; and 106, determining the type of the application program according to the type information and the classification rule, and storing and/or displaying the application program according to the type. The invention provides a terminal as well. By the method and the terminal, automatic classification of the application program can be realized without manual operation of users.

The disclosed embodiment provides a method and a device for displaying notification messages, which are applied to terminal equipment. The method comprises the following steps: receiving the notification messages; classifying the notification messages according to the preset classification rule; displaying the notification messages in notification bars according to the classification. In the method provided by the embodiment, the terminal equipment such as a mobile phone can classify the notification messages according to the preset classification rule after receiving the notification message of a system or each APP (application); for example, the notification messages with the same source are classified into the same class, and then the notification messages are displayed in the notification bars according to the classification, thus an interface of each notification bar is concise and not disordered; a user can rapidly find out concerned message; the reading speed of the user is improved; the operation efficiency of the terminal equipment is improved; the user experience is also optimized.

A system and method are disclosed for providing metric recommendations by a cloud event log analytics system. The log analytics system includes a user interface which allows users to view metric recommendations, view, modify, annotate, delete, or create log metrics. In a first embodiment, centroid vectors are created from metadata associated with user access of log metrics. The centroid vectors are compared to metrics vectors created from log metrics and the results are ranked and provided to users as metric recommendations. In a second embodiment, classification rules are inferred for metric matrix tables containing metadata about log metric usage. Classification rules are assigned to a decision tree used to calculate composite probabilities of interest of log metrics. A recommendation matrix incorporate the composite probabilities of interest to predict the degree of interest an analytics user may have in a log metric for a given role.

The present invention provides a electrical power system short-term load forecasting method based on a big data technology. The user-level load forecasting is realized by utilizing a data mining technology, and user-level loads are accumulated to form a system load. The electrical power system short-term load forecasting method comprises the steps of: conducting load curve clustering analysis, and classifying load curves with similar shape features into a class; determining key influence factors, and achieving the purposes of reducing classifying rules and simplifying a forecasting model; establishing classifying rules, and adopting a CART decision tree algorithm to obtain condensation level clustering analysis results; classifying days to be forecast; training the forecasting model and forecasting, and selecting a corresponding support vector machine model to complete the forecasting according to the obtained classification results of the days to be forecast; and completing the step of calculating the system load on a Hadoop big data calculating platform. The electrical power system short-term load forecasting method based on the big data technology studies a user-level load forecasting framework, discovers electricity utilization behavior rules of a user by utilizing the data mining technology, and increases the precision of load forecasting.

The present invention relates generally to the classification of items into categories, and more generally, to the automatic selection of different classifiers at different places within a hierarchy of categories. An exemplary hierarchical categorization method uses a hybrid of different classification technologies, with training-data based machine-learning classifiers preferably being used in those portions of the hierarchy above a dynamically defined boundary in which adequate training data is available, and with a-priori classification rules not requiring any such training-data being used below that boundary, thereby providing a novel hybrid categorization technology that is capable of leveraging the strengths of its components. In particular, it enables the use of human-authored rules in those finely divided portions towards the bottom of the hierarchy involving relatively close decisions for which it is not practical to create in advance sufficient training data to ensure accurate classification by known machine-learning algorithms, while still facilitating eventual change-over within the hierarchy to machine learning algorithms as sufficient training data becomes available to ensure acceptable performance in a particular sub-portion of the hierarchy.

The invention discloses a method and module for extracting and interpreting information of a remote-sensing image, and provides a geographical element object based automatic interpreting method based on SRMMHR and random forest. The module extracts and interprets the information of the remote-sensing image by the adoption of the method. The method and module for extracting and interpreting the information of the remote-sensing image can achieve effective segmentation of the remote-sensing image, automatic optimization of characteristics, and automatic establishment of a classification rule set; a means which is little in manual intervention, high in degree of automation and high in interpreting precision is provided for extracting and interpreting the information of the remote-sensing image.

One example method is provided for dynamic allocation of air interface resources in a cellular network comprising at least three wireless cells located within a geographical proximity of each other, the method comprising determining, by a central managing entity, one or more classification rules for classifying each of said plurality of mobile devices according to the one or more classification rules; providing, by the central management entity, to a group of base stations associated with the at least three cells, information that comprises: information that relates to the determined one or more classification rules; information that relates to semi-static allocation of blocks of air interface resources adapted for use by one or more specific members of the group of base stations.

An edge switch enables service provisioning and dynamic service association for end devices coupled to the edge switch. The edge switch maintains a generic user profile that includes classification rules for classifying incoming traffic from the end devices to Virtual Local Area Network (VLAN) VLAN tunnel services. Upon detecting incoming traffic on an access port of the edge switch, the edge switch accesses the generic user profile to determine whether the incoming traffic matches one of the classification rules, and if so, automatically associates the incoming traffic with a VLAN tunnel service indicated by the matching classification rule to provide tunnel-based connectivity to remote end devices associated with the VLAN tunnel service.

A method for assigning a lymph node in a medical image with an anatomical name, the method including: identifying landmarks in a medical image; computing features relative to the landmarks given a location of a lymph node in the medical image; and assigning an anatomical name to the location of the lymph node by using a classifier that compares the computed features with classification rules.

A content management system (CMS) provides a way to include data from an external source as an object in the repository managed by the CMS. The CMS includes an external data mechanism that processes a document with a query to a data source external to the repository. The external data mechanism executes the query, and creates one or more objects in the repository according to the type of data returned as defined by classification rules. Each object containing data returned from the query is linked to that query via a formal relationship in the CMS. When an object that has a formal relationship with a query is checked out of the repository, the query corresponding to the object may be executed, and the data returned from the query may be stored in the object. In the alternative, the data may be used directly if a corresponding lifecycle policy indicates the corresponding query should not be executed.

Apparatus and method for classifying multi-dimensional biological data are described. In some embodiments, a methodology for deriving a linear classification rule can be used for predicting a biological activity or a biological state. Advantageously, the methodology described herein facilitates obtaining robust and sparse classifiers that account for uncertainty involved in real-world experiments and improve computational efficiency and ease of interpretation of results.