Patent ID: 8375255
Filing Date: 2013-02-12
Classification: G06F,H04L

Abstract:
1. A device to detect and diagnose an anomaly of a network, comprising: an anomaly detection module receiving a first data stream from a first data source including a first event-series related to the network, the anomaly detection module executing at least one algorithm to detect a potential anomaly in the first event-series; and a correlating module receiving, only if a potential anomaly is detected in the first event-series, a second data stream from a second data source including a second event-series related to the network, the second event series being independent from the first event series, the correlating module determining whether the potential anomaly is false, the correlating module further determining whether the potential anomaly is a true anomaly, wherein the correlating module does not receive the second data stream if no potential anomaly is detected in the first event-series.