Determining whether received data is required by an analytic
AssigneeHewlett-Packard Development Company, L.P.
InventorsDaniel Ellam, Jonathan Griffin
Life of this patent
Estimating the term…
Abstract
A non-transitory machine-readable storage medium encoded with instructions executable with a processor is described. The instructions comprise instructions to determine whether a received data item is required by an analytic process to make a determination; and instructions to, in response to determining that the received data item is required by the analytic process, store the received data item in a pre-analytic store.
Claims15
A computing system comprising:
- a processor,
- a storage coupled to the processor, the storage comprising a pre-analytic store to store a plurality of data items, each data item representing a network event, and
- an instruction set to cooperate with the processor and the memory to:
- determine whether a received data item is required by a network security analytic, by determining whether the data items stored in the pre-analytic store meet a first criterion;
- in response to determining that the received data item is required by the network security analytic, store the received data item in the pre-analytic store.
A method comprising:
- determining whether a received data item representing a network event is required by a network security analytic, by determining whether previously received data items already provide sufficient data for the network security analytic to make a determination below a predetermined error rate, and
- in response to determining that the data item is required, storing the received data item for processing by the network security analytic.
A non-transitory machine-readable storage medium encoded with instructions executable with a processor, the machine-readable storage medium comprising:
- instructions to determine whether a received data item is required by an analytic process to make a determination below a predetermined error rate;
- instructions to, in response to determining that the received data item is required by the analytic process, store the received data item in a pre-analytic store.
Dependencies are inferred from the claim text.