Anomaliedetektionsmaschine in einem Sicherheitsverwaltungssystem

Details

Veröffentlichungs-Nr.

EP4752764

Anmeldetag

6. November 2025

Veröffentlichung

3. Juni 2026

Rechtsraum

EP

Abstract

Methods, systems, and computer storage media for providing anomaly detection using an anomaly detection engine of a security management system are described. The anomaly detection engine supports anomaly detection that refers to the process of identifying command-line activities that deviate from established patterns of normal behavior within a large-scale environment, such as data centers. The anomaly detection engine operates based on an advanced framework specifically designed to enhance the security of large-scale environments by detecting anomalous and potentially malicious command-line activities. By integrating global and local context analysis, employing efficient data filtering and distributed computing, and leveraging advanced models for pattern recognition, the anomaly detection engine provides a scalable approach to anomaly detection. Operationally, the anomaly detection engine can be implemented as based on a dual-layer detection architecture, use of statistical models in command-line analysis, granular and context n-gram tokenization, adaptable anomaly scoring and thresholding, scalability, and continuous compliance monitoring.

Anmelder

Firma

Microsoft Technology Licensing, LLC

Land

🇺🇸 USA