Patent ID: 11916948
Assignee: SENSEON TECH LTD
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC H

Claim 16:
17. A non-transitory computer-readable medium comprising program instructions configured, upon execution by one or more hardware computer processors, to cause the one or more hardware computer processors to implement operations comprising:
determining a first data matrix from a set of collected data, each row of the first data matrix being a datapoint and each column corresponding to a feature;
applying an unsupervised classification process to the first data matrix to classify each datapoint in relation to a set of classes;
based on the unsupervised classification process, re-structuring the cybersecurity dataset as a second data matrix; and
and applying anomaly detection to the second data matrix, the anomaly detection incorporating class information obtained in the unsupervised classification process, the anomaly detection comprising identifying at least one of the datapoints as anomalous using a residuals matrix, the residuals matrix computed between the second data matrix and an approximation of the second data matrix, by applying a truncated singular value decomposition (SVD) to the second data matrix,
wherein re-structuring the cybersecurity dataset comprises:
partitioning the cybersecurity dataset into multiple partitions based on the unsupervised classification process, wherein the second data matrix corresponds to a single partition of the multiple partitions, wherein the residuals matrix is specific to the single partition.