Patent ID: 7660707
Filing Date: 2010-02-09
Classification: G06K

Abstract:
1. A computer implemented model detection apparatus for detecting model pattern changes representing intrusion of an anomalous source from a series of input data, the means for implementation being provided by computer, comprising: means for storing mutually different distribution estimate parameters representing occurrences of said series of input data, each different distribution estimate parameter being stored in a different estimate parameter memory, the memory thereby being initialized; means for producing a plurality of probability models by calculating probability occurrences of said series of data blocks using the stored distribution estimate parameters and a series of data blocks of said input data, said series of data blocks having an order and being successively supplied in said order to the respective successive means for producing distribution estimate parameters, and updating the stored distribution estimate parameters with the produced probability models respectively; means for storing in a model series memory in said computing apparatus a plurality of candidate models corresponding in number to the stored distribution estimate parameters; means for successively producing a plurality of optimal probability models from said series of data blocks of said input data, said distribution estimate parameters stored successively in said estimate parameter memories and said candidate models stored in said model series memory so that the optimal probability models minimize joint probability of occurrences of said data blocks and said distribution estimate parameters and updating the stored candidate models with the optimal probability models; means for calculating, at each instant of time, an optimal model series from said plurality of candidate models stored in said model series memory; and means for warning in response to an occurrence of a rapid change in a number of command patterns from said optimal series of models exactly when command data of said anomalous source intrudes into said series of input data.