DEVICE-BASED ANOMALY DETECTION USING RANDOM FOREST MODELS

摘要

Training data generated at a particular device deployed in a machine-to-machine network is used to train a first plurality of decision trees for inclusion in a random forest model for use in anomaly detection. Copies of the trained first plurality of decision trees are sent to at least one other device deployed in the machine-to-machine network and copies of a second plurality of decision trees are received from the other device, which were trained at the other device using training data generated by the other device. The random forest model is generated to include the first and second plurality of decision trees. The random forest model is used by the particular device to detect anomalies in data generated by the particular device.