Security event association technology

A computer system for information query, comprising:

• one or more processors;
• a computer-readable memory coupled to the processors, the computer-readable memory comprising instructions that when executed by the processors perform actions of:
• obtaining a result of implementation of one or more Locality-Sensitive Hashing (LSH) functions to feature data of a first event detected by a first device;
• mapping the result to one or more positions in a data structure;
• obtaining, in response to data elements of the one or more positions indicating a first information associating with the one or more positions exists in a storage, the first information from the storage;
• and
• sending the first information to the first device.

A computer program product, comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform actions of:

• obtaining a result of implementation of one or more Locality-Sensitive Hashing (LSH) functions to feature data of a first event detected by a first device;
• mapping the result to one or more positions in a data structure;
• obtaining, in response to data elements of the one or more positions indicating first information associating with the one or more positions exists in a storage, the first information from the storage;
• and
• sending the first information to the first device.