Patent Document ID: 10061632
Application ID: 14950357
Patent Flag: 1

Claim One:
1. A system comprising: a normal behavior characterization circuit configured to (i) receive values for a first metric of a plurality of metrics, and (ii) generate a baseline profile indicating normal behavior of the first metric based on the received values; an anomaly identification circuit configured to identify an anomaly in present values of the first metric in response to the present values deviating outside the baseline profile; an anomaly behavior characterization circuit configured to (i) analyze a plurality of prior anomalies identified by the anomaly identification circuit and (ii) based on the plurality of prior anomalies, develop a model of anomalies of the first metric; an anomaly scoring circuit configured to determine a first score for a present anomaly identified by the anomaly identification circuit for the first metric, wherein the first score is based on characteristics of the present anomaly and the model of the anomalies of the first metric; and a reporting circuit configured to send an alert to a designated user in response to the first score exceeding a threshold, wherein the normal behavior characterization circuit is configured to update the baseline profile in real-time as the values for the first metric are received, and wherein the anomaly behavior characterization circuit is configured to update the model of the anomalies of the first metric on a periodic schedule.