Methods, systems, and apparatus, including computer programs encoded on computer
storage media, for determining network related anomaly scores. One of the methods …

In some implementations, sequences of time series values determined from machine data
are obtained. Each sequence corresponds to a respective time series. A plurality of …

2014-03-25 Assigned to LOS ALAMOS NATIONAL SECURITY, LLC reassignment LOS
ALAMOS NATIONAL SECURITY, LLC ASSIGNMENT OF ASSIGNORS INTEREST (SEE …

In one embodiment, a device in a network generates an expected traffic model based on a
training set of data used to train a machine learning attack detector. The device provides the …

BACKGROUND Antivirus and advanced persistent threat (APT) protection systems typically
rely on platform-dependent attributes of various computing objects, or other detailed …

In an embodiment, the method comprises receiving an identification of an anomaly
associated with a false positive identification of a security threat by the intrusion detection …

According to an example, pre-cognitive SIEM may include using trained classifiers to detect
an anomaly in input events, and generating a predictive attack graph based on the detected …

BACKGROUND Anomaly detection is the search for items or events which do not conform to
an expected pattern. The detected patterns are called anomalies and translate to critical and …

Disclosed is a method 101 to be used on collected network data flow 116 associated with a
network 100; the method 101 includes: an anomaly-detection operation 103 including:(A) …

Methods, systems, and apparatus, including computer programs encoded on computer
storage media, for creating structured data using data received from unstructured textual …