US 2016/0259869 A1 · SELF-LEARNING SIMULATION ENVIRONMENTS

Abstract

Systems and methods may include receiving performance data of a system. The systems and methods may include generating a virtual representation of the system based on the performance data. The systems and methods may include simulating interactions between the virtual representation and an environment based on the performance data. The systems and methods may include generating an alert indicating an occurrence of an anomalous event based on the simulated interactions. The systems and methods may include determining that the alert was a false positive indicator of the occurrence of the anomalous event. The systems and methods may include, in response to determining that the alert was a false positive indicator, determining differences between a behavior of the system and the simulated interactions. The systems and methods may include determining an adjustment to the virtual representation to mitigate the differences between the behavior of the system and the simulated interactions.

Claims20

Dependent claims

A method comprising:

receiving performance data of a physical system;
generating a virtual representation of the physical system based on the performance data of the physical system;
simulating interactions between the virtual representation and an environment of the physical system based on the performance data of the physical system;
generating an alert indicating an occurrence of an anomalous event in the physical system based on the simulated interactions;
determining that the alert was a false positive indicator of the occurrence of the anomalous event in the physical system;
in response to determining that the alert was a false positive indicator of the occurrence of the anomalous event in the physical system, determining differences between a behavior of the physical system and the simulated interactions between the virtual representation and the environment;
determining an adjustment to the virtual representation of the physical system to mitigate the differences between the behavior of the physical system and the simulated interactions;
and
modifying the virtual representation of the physical system in accordance with the determined adjustment.

6 more elements

A system comprising:

a processing system configured to:
receive performance data of a physical system;
generate a virtual representation of the physical system based on the performance data of the physical system;
simulate interactions between the virtual representation and an environment of the physical system based on the performance data of the physical system;
generate an alert indicating an occurrence of an anomalous event in the physical system based on the simulated interactions;
determine that the alert was a false positive indicator of the occurrence of the anomalous event in the physical system;
in response to determining that the alert was a false positive indicator of the occurrence of the anomalous event in the physical system, determine differences between a behavior of the physical system and the simulated interactions between the virtual representation and the environment;
determine an adjustment to the virtual representation of the physical system to mitigate the differences between the behavior of the physical system and the simulated interactions;
and
modify the virtual representation of the physical system in accordance with the determined adjustment.

7 more elements

A computer program product comprising:

a computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising:
computer readable program code configured to receive performance data of a physical system;
computer readable program code configured to generate a virtual representation of the physical system based on the performance data of the physical system;
computer readable program code configured to simulate interactions between the virtual representation and an environment of the physical system based on the performance data of the physical system;
computer readable program code configured to generate an alert indicating an occurrence of an anomalous event in the physical system based on the simulated interactions;
computer readable program code configured to determine that the alert was a false positive indicator of the occurrence of the anomalous event in the physical system;
computer readable program code configured to, in response to determining that the alert was a false positive indicator of the occurrence of the anomalous event in the physical system, determine differences between a behavior of the physical system and the simulated interactions between the virtual representation and the environment;
computer readable program code configured to determine an adjustment to the virtual representation of the physical system to mitigate the differences between the behavior of the physical system and the simulated interactions;
and
computer readable program code configured to modify the virtual representation of the physical system in accordance with the determined adjustment.

7 more elements

Dependencies are inferred from the claim text.

Self-learning simulation environments

Life of this patent

Self-learning simulation environments

Life of this patent

Abstract

Claims20