A non-transitory computer-readable recording medium that includes a program recorded thereon, the program including instructions that cause a computer to perform:
- obtaining process data of a process having a plurality of process characteristics that represents a tendency of the process data;
- and
- detecting an anomalous state of the process based on a degree of anomaly that indicates a distance in the obtained process data from a hyperplane that indicates a boundary of a space that represents a normal state of the process generated from feature information that represents a feature of normal process data for each of the process characteristics,
- wherein the feature information that represents the normal state of the process is optimum feature information for each of the process characteristics found by evaluating a candidate of feature information based on an error between the normal process data and estimated process data calculated using the candidate of feature information, the candidate of feature information being generated for each of the process characteristics from a plurality of items of normal process data obtained when the process is in the normal state.