4 results about "Composite event" patented technology

A data platform monitors a compute environment by performing multi-stage heuristic analysis of event data representing a plurality of events occurring within the environment. The platform utilizes multiple event analyzers, each configured according to a distinct analysis heuristic, to evaluate different subsets of the event data and generate corresponding output signals. A higher-level event analyzer applies a further heuristic to the multiple output signals to generate a composite alert signal, indicating whether the combination of analyzed events collectively represents a security intrusion or other anomalous condition of sufficient severity to warrant alerting. Based on the composite alert signal, the platform performs an alert-based operation, such as generating a user-facing alert, initiating an automated mitigation, or updating a contextual model of system behavior. By combining the analytical outputs of heterogeneous heuristics, the disclosed architecture enhances the accuracy and contextual relevance of automated intrusion detection within complex computing environments.

The application provides a logic polymorphism-oriented matter logic graph representation learning method and system, the matter logic graph representation learning method comprises the following steps: vectorizing nodes in a matter logic graph to obtain a preliminary vector representation; a composite event composed of events is constructed by using a tree structure; the logic relationship between events is considered, a periodic function is used as an event confidence mapping function, and the matter logic of the composite event is modeled; a negative sampling strategy is selected to perform negative sampling on the composite event; and marginloss is used as a loss function to train event embedding. By using the tree structure to model event combination and using the periodic function as the event score, the model can ensure the expression ability for complex events and ensure the embedding quality of each event, so as to be suitable for downstream tasks in different scenes.

The invention relates to a user behavior burying point and analysis method based on event driving, and the method comprises the following steps: designing an atomic event, a combined event and a composite event as hierarchical event models, determining the identification parameter of each event, classifying each event into a key event, a non-core event and a basic behavior, performing different burying points on each event according to the type of the event to obtain an original behavior data set acquired by mixed burying points; associating the identification parameters of the original behavior data set to the same identification parameters through a matching algorithm, and adopting the original behavior data set after Kafka buffer association to obtain a structured behavior data set after unified identity association; and analyzing the structured behavior data set from multiple dimensions to obtain user behavior characteristics and product experience, and providing differentiated guidance based on the user behavior characteristics and the product experience. Compared with the prior art, the method has the advantages of shortening the service demand response time and the like.

Embodiments of the present application disclose an event processing method, which comprises: determining an event pattern and a count threshold for pattern matching of an event stream; determining target counting logic for counting a number of target events matching the event pattern; wherein the target events at least comprise events flowing in discontinuously in a target time sequence; determining target event matching logic based on the event pattern, the count threshold and the target counting logic; wherein the target event matching logic is used to determine a composite event matching the event pattern and satisfying the count threshold; and processing the event stream to be processed based on the target event matching logic. Embodiments of the present application also disclose an event processing device, equipment and a computer readable storage medium.