公开(公告)号：US20240054043A1

公开(公告)日：2024-02-15

申请号：US18359288

申请日：2023-07-26

申请人： NEC Laboratories America, Inc.

发明人： Zhengzhang Chen ,  Haifeng Chen ,  Liang Tong ,  Dongjie Wang

IPC分类号： G06F11/07

CPC分类号： G06F11/079 ,  G06F11/0709 ,  G06F11/076

摘要： A computer-implemented method for detecting trigger points to identify root cause failure and fault events is provided. The method includes collecting, by a monitoring agent, entity metrics data and system key performance indicator (KPI) data, integrating the entity metrics data and the KPI data, constructing an initial system state space, detecting system state changes by calculating a distance between current batch data and an initial state, and dividing a system status into different states.

公开(公告)号：US20240214414A1

公开(公告)日：2024-06-27

申请号：US18359389

申请日：2023-07-26

申请人： NEC Laboratories America, Inc.

发明人： Zhengzhang Chen ,  Haifeng Chen ,  Dongjie Wang

IPC分类号： H04L9/40 ,  H04L41/0631 ,  H04L41/16

CPC分类号： H04L63/145 ,  H04L41/0631 ,  H04L41/16

摘要： A computer-implemented method for identifying attack origins is provided. The method includes detecting a trigger point from entity metrics data and key performance indicator (KPI) data, generating a learned causal graph by fusing a state-invariant causal graph with a state-dependent causal graph, backtracking from an attack detection point, via an incident backtrack and system recovery component, by using the learned causal graph to identify an attack origin when an intrusion or attack occurs, and displaying data relating to the attack origin on a visualization display for user analysis.

公开(公告)号：US20240061739A1

公开(公告)日：2024-02-22

申请号：US18359309

申请日：2023-07-26

申请人： NEC Laboratories America, Inc.

发明人： Zhengzhang Chen ,  Haifeng Chen ,  Liang Tong ,  Dongjie Wang

IPC分类号： G06F11/07

CPC分类号： G06F11/079 ,  G06F11/0709

摘要： A computer-implemented method for identifying root cause failure and fault events is provided. The method includes detecting a trigger point, converting, via an encoder, previous system state data, new batch data in a next system state, and a causal graph to system state-invariant embeddings and system state-dependent embeddings, generating a learned causal graph, via a graph generation layer, by integrating state-invariant and state-dependent information, and predicting, by a prediction layer, future time-series data on the learned causal graph.

公开(公告)号：US20240061740A1

公开(公告)日：2024-02-22

申请号：US18359350

申请日：2023-07-26

申请人： NEC Laboratories America, Inc.

发明人： Zhengzhang Chen ,  Haifeng Chen ,  Liang Tong ,  Dongjie Wang

IPC分类号： G06F11/07 ,  G06F11/34

CPC分类号： G06F11/079 ,  G06F11/3447

摘要： A computer-implemented method for locating root causes is provided. The method includes detecting a trigger point from entity metrics data and key performance indicator (KPI) data, generating a learned causal graph by fusing a state-invariant causal graph with a state-dependent causal graph, and locating the root causes by employing a random walk-based technique to estimate a probability score for each of the entity metrics data by starting from a KPI node.