Cfetool. A General Purpose Tool for Anomaly Detection in Periodic Data

摘要

Cfengine's environment daemon 'cfenv' has a limited and fixed set of metrics it measures on a computer. The data is assumed to be periodic in nature and cfenvd reports any data points that fall too far out of the pattern it has learned from past measurements. This is used to detect 'anomalies' on computers. We introduce a new standalone tool, 'cfetool', that allows arbitrary periodic data to be stored and evaluated. The user interface is modeled after rrdtool, another widely used tool to store measured data. Because a standalone tool can be used not only for computer related data, we have extended the built-in mathematics to apply to yearly data as well.