CA3220172A1 - Method and system for incremental centroid clustering - Google Patents

Method and system for incremental centroid clustering Download PDF

Info

Publication number
CA3220172A1
CA3220172A1 CA3220172A CA3220172A CA3220172A1 CA 3220172 A1 CA3220172 A1 CA 3220172A1 CA 3220172 A CA3220172 A CA 3220172A CA 3220172 A CA3220172 A CA 3220172A CA 3220172 A1 CA3220172 A1 CA 3220172A1
Authority
CA
Canada
Prior art keywords
cluster
computing device
data point
data
clusters
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CA3220172A
Other languages
English (en)
French (fr)
Inventor
Steven John HENKEL
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
BlackBerry Ltd
Original Assignee
BlackBerry Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by BlackBerry Ltd filed Critical BlackBerry Ltd
Publication of CA3220172A1 publication Critical patent/CA3220172A1/en
Pending legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
    • G06F21/566—Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06N—COMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS
    • G06N20/00—Machine learning
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06—Management of faults, events, alarms or notifications
    • H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/28—Databases characterised by their database models, e.g. relational or object models
    • G06F16/284—Relational databases
    • G06F16/285—Clustering or classification
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06—Management of faults, events, alarms or notifications
    • H04L41/069—Management of faults, events, alarms or notifications using logs of notifications; Post-processing of notifications
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/16—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks using machine learning or artificial intelligence
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425—Traffic logging, e.g. anomaly detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1433—Vulnerability analysis
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W24/00—Supervisory, monitoring or testing arrangements
    • H04W24/04—Arrangements for maintaining operational condition
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W84/00—Network topologies
    • H04W84/02—Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
    • H04W84/04—Large scale networks; Deep hierarchical networks
    • H04W84/08—Trunked mobile radio systems
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/03—Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
    • G06F2221/034—Test or assess a computer or a system
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06N—COMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS
    • G06N20/00—Machine learning
    • G06N20/10—Machine learning using kernel methods, e.g. support vector machines [SVM]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Databases & Information Systems (AREA)
  • Computer Hardware Design (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Computing Systems (AREA)
  • Data Mining & Analysis (AREA)
  • Medical Informatics (AREA)
  • Artificial Intelligence (AREA)
  • Evolutionary Computation (AREA)
  • Computer Vision & Pattern Recognition (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Virology (AREA)
  • Mathematical Physics (AREA)
  • Debugging And Monitoring (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
  • Testing And Monitoring For Control Systems (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
CA3220172A 2022-12-16 2023-11-15 Method and system for incremental centroid clustering Pending CA3220172A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US18/083,102 US12511387B2 (en) 2022-12-16 2022-12-16 Method and system for incremental centroid clustering
US18/083,102 2022-12-16

Publications (1)

Publication Number Publication Date
CA3220172A1 true CA3220172A1 (en) 2024-06-16

Family

ID=89164529

Family Applications (1)

Application Number Title Priority Date Filing Date
CA3220172A Pending CA3220172A1 (en) 2022-12-16 2023-11-15 Method and system for incremental centroid clustering

Country Status (5)

Country Link
US (2) US12511387B2 (enExample)
EP (1) EP4386637A1 (enExample)
JP (1) JP2024086626A (enExample)
CN (1) CN118214644A (enExample)
CA (1) CA3220172A1 (enExample)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20250086464A1 (en) * 2023-09-11 2025-03-13 Successkpi, Inc. Executing playbooks based on cluster drift
CN121117929B (zh) * 2025-08-28 2026-05-01 南京奕虎科技有限公司 一种企业多源异构数据自动化融合方法及系统

Family Cites Families (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH0765168A (ja) * 1993-08-31 1995-03-10 Hitachi Ltd 関数近似装置及び方法
WO2011145374A1 (ja) * 2010-05-17 2011-11-24 株式会社日立製作所 計算機システム、及び、規則生成方法
JP5977958B2 (ja) * 2012-02-29 2016-08-24 綜合警備保障株式会社 特異データ検出装置および特異データ検出方法
US10410135B2 (en) * 2015-05-21 2019-09-10 Software Ag Usa, Inc. Systems and/or methods for dynamic anomaly detection in machine sensor data
JP6778132B2 (ja) * 2017-03-13 2020-10-28 株式会社日立製作所 設備機器の異常診断システム
US10242087B2 (en) * 2017-05-12 2019-03-26 International Business Machines Corporation Cluster evaluation in unsupervised learning of continuous data
JP7033262B6 (ja) * 2018-03-19 2022-04-18 日本電気株式会社 情報処理装置、情報処理方法及びプログラム
US10802942B2 (en) * 2018-12-28 2020-10-13 Intel Corporation Methods and apparatus to detect anomalies of a monitored system
WO2020139179A1 (en) * 2018-12-28 2020-07-02 Telefonaktiebolaget Lm Ericsson (Publ) A wireless device, a network node and methods therein for training of a machine learning model
US11533326B2 (en) * 2019-05-01 2022-12-20 Oracle International Corporation Systems and methods for multivariate anomaly detection in software monitoring
US11237897B2 (en) * 2019-07-25 2022-02-01 International Business Machines Corporation Detecting and responding to an anomaly in an event log
US11079731B2 (en) * 2019-10-07 2021-08-03 Honeywell International Inc. Multi-site building management system
KR102455758B1 (ko) * 2020-01-30 2022-10-17 가부시키가이샤 스크린 홀딩스 데이터 처리 방법, 데이터 처리 장치 및 기억 매체
US11507785B2 (en) * 2020-04-30 2022-11-22 Bae Systems Information And Electronic Systems Integration Inc. Anomaly detection system using multi-layer support vector machines and method thereof
US11831664B2 (en) * 2020-06-03 2023-11-28 Netskope, Inc. Systems and methods for anomaly detection

Also Published As

Publication number Publication date
CN118214644A (zh) 2024-06-18
JP2024086626A (ja) 2024-06-27
US12511387B2 (en) 2025-12-30
US20240202336A1 (en) 2024-06-20
US20260087136A1 (en) 2026-03-26
EP4386637A1 (en) 2024-06-19

Similar Documents

Publication Publication Date Title
US20260087136A1 (en) Method and system for incremental centroid clustering
Rajapaksha et al. Ai-based intrusion detection systems for in-vehicle networks: A survey
US12155682B2 (en) Vehicle anomaly detection server, vehicle anomaly detection system, and vehicle anomaly detection method
US12250240B2 (en) Systems and methods for assessing risk in networked vehicle components
US20250175455A1 (en) Ai-driven defensive cybersecurity strategy analysis and recommendation system
EP3938937B1 (en) Cloud security using multidimensional hierarchical model
US20220224723A1 (en) Ai-driven defensive cybersecurity strategy analysis and recommendation system
EP3574430B1 (en) Continuous learning for intrusion detection
Bezemskij et al. Detecting cyber-physical threats in an autonomous robotic vehicle using Bayesian networks
US20230054186A1 (en) Anomaly detection
EP3435623A1 (en) Malware detection using local computational models
EP3954145A1 (en) Adaptive severity functions for alerts
JP2018092613A (ja) 情報処理装置、情報処理方法及びプログラム
CN109889550B (zh) 一种DDoS攻击确定方法及装置
EP3798840B1 (en) Information processing device, data analysis method, and program
WO2020208639A2 (en) A system and method for detection of anomalous controller area network (can) messages
Shah et al. Reducing features of KDD CUP 1999 dataset for anomaly detection using back propagation neural network
EP4096232A1 (en) Attack detection method, attack detection system and program
US20200213203A1 (en) Dynamic network health monitoring using predictive functions
WO2018105320A1 (ja) 情報処理装置、情報処理方法及びプログラム
CN109272599A (zh) 一种数据处理方法及相关设备
CN117290803B (zh) 一种储能逆变器远程故障诊断方法、系统及介质
EP3720061B1 (en) Bit assignment estimating device, bit assignment estimating method, and program
Liu et al. A lightweight and responsive on-line ids towards intelligent connected vehicles system
Ahmad et al. Intelligent Ensemble Learning Framework for Intrusion Detection in Consumer Connected and Autonomous Vehicles

Legal Events

Date Code Title Description
MFA Maintenance fee for application paid

Free format text: FEE DESCRIPTION TEXT: MF (APPLICATION, 2ND ANNIV.) - STANDARD

Year of fee payment: 2

U00 Fee paid

Free format text: ST27 STATUS EVENT CODE: A-1-1-U10-U00-U101 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: MAINTENANCE REQUEST RECEIVED

Effective date: 20251103

U11 Full renewal or maintenance fee paid

Free format text: ST27 STATUS EVENT CODE: A-1-1-U10-U11-U102 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: MAINTENANCE FEE PAYMENT PAID IN FULL

Effective date: 20251103

D11 Substantive examination requested

Free format text: ST27 STATUS EVENT CODE: A-1-1-D10-D11-D117 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: REQUEST FOR EXAMINATION RECEIVED

Effective date: 20260324

D16 Fast track examination requested

Free format text: ST27 STATUS EVENT CODE: A-1-1-D10-D16-D108 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: ADVANCED EXAMINATION REQUESTED - PPH

Effective date: 20260324

P11 Amendment of application requested

Free format text: ST27 STATUS EVENT CODE: A-1-1-P10-P11-P101 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: AMENDMENT RECEIVED - VOLUNTARY AMENDMENT

Effective date: 20260324

W00 Other event occurred

Free format text: ST27 STATUS EVENT CODE: A-1-1-W10-W00-W111 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: CORRESPONDENT DETERMINED COMPLIANT

Effective date: 20260324

W00 Other event occurred

Free format text: ST27 STATUS EVENT CODE: A-1-1-W10-W00-W111 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: CORRESPONDENT DETERMINED COMPLIANT

Effective date: 20260325

D00 Search and/or examination requested or commenced

Free format text: ST27 STATUS EVENT CODE: A-1-1-D10-D00-D118 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: REQUEST FOR EXAMINATION REQUIREMENTS DETERMINED COMPLIANT

Effective date: 20260407

D11 Substantive examination requested

Free format text: ST27 STATUS EVENT CODE: A-1-2-D10-D11-D155 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: ALL REQUIREMENTS FOR EXAMINATION DETERMINED COMPLIANT

Effective date: 20260407

P11 Amendment of application requested

Free format text: ST27 STATUS EVENT CODE: A-2-2-P10-P11-P102 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: AMENDMENT DETERMINED COMPLIANT

Effective date: 20260407

P13 Application amended

Free format text: ST27 STATUS EVENT CODE: A-2-2-P10-P13-X000 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: APPLICATION AMENDED

Effective date: 20260407

W00 Other event occurred

Free format text: ST27 STATUS EVENT CODE: A-2-2-W10-W00-W100 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: LETTER SENT

Effective date: 20260407

D17 Fast track examination accepted

Free format text: ST27 STATUS EVENT CODE: A-2-2-D10-D17-D112 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: ADVANCED EXAMINATION DETERMINED COMPLIANT - PPH

Effective date: 20260409

W00 Other event occurred

Free format text: ST27 STATUS EVENT CODE: A-2-2-W10-W00-W111 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: CORRESPONDENT DETERMINED COMPLIANT

Effective date: 20260409