Patent ID: 11863576
Assignee: NETAPP, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method, comprising:
computing, by a storage system, one or more access rates of a set of entities for each user of a plurality of users, wherein the one or more access rates refers to data operations for the set of entities stored by the storage system;
normalizing, by the storage system, the one or more access rates of the set of entities for a first subset of the plurality of users by dividing a respective user's access rate by a total access rate of a community, the respective user being part of the first subset belonging to the community, the community being based on access to the set of entities by the first subset of the plurality of users, and the one or more normalized access rates including a first normalized access rate for a first user of the first subset;
detecting, by the storage system, a first anomaly in response to determining that the first normalized access rate satisfies a threshold; and
restricting, by the storage system, access by the first user to the set of entities in response to detecting the first anomaly.