Automatic ontology generation for internet of things applications

An apparatus comprising:

• a processor;
• and
• a memory storing one or more sequences of instructions which, when executed, cause the processor to perform:
• monitoring, by a computing device located at an edge of a network, network traffic generated by a plurality of endpoints using the network to collect a plurality of data items corresponding to the network traffic transmitted by the plurality of endpoints using the network;
• generating, by the computing device, a probabilistic hierarchy using the plurality of data items corresponding to the network traffic;
• generating, by the computing device using the probabilistic hierarchy and natural language data, a similarity metric;
• generating, by the computing device using the probabilistic hierarchy, the natural language data, and the similarity metric, an ontology for the plurality of endpoints;
• detecting, by the computing device using the ontology for the plurality of endpoints, a network anomaly;
• in response to detecting the network anomaly, sending a notification;
• generating, by the computing device, simulated output for an endpoint of the plurality of endpoints;
• comparing, by the computing device, the simulated output to an actual output received from the endpoint of the plurality of endpoints;
• and
• updating the ontology based on the comparing.