Determining anomalous events in a system using a bloom filter

A controller for controlling operation of a system, the controller being configured to:

• define a Bloom filter representing a plurality of predefined signatures each comprising a string of values and each being indicative of an anomalous event in the system;
• receive sensor data, from a plurality of sensors of the system, indicative of a plurality of operational parameters associated with the system;
• determine, based on the received sensor data, a current signature comprising a string of values and being indicative of current operation of the system;
• and,
• compare the current signature to the predefined signatures to determine whether there is an anomalous event in the system, the comparison comprising applying the Bloom filter to the current signature, and output a control action for the system in dependence on the comparison.