System (100), methods and computer program products are provided for determining an abnormal technical status of a technical system (200). The computer system (100) receives, from the technical system (200), a plurality of signals wherein each signal (S1 to Sn) reflects the technical status of at least one system component. The system further retrieves, from an alarm management system (300), high alarm thresholds (H1 to Hn) and low alarm thresholds (L1 to Ln) associated with respective received signals (S1 to Sn). Signal values in a range between the associated high alarm threshold and the associated low alarm threshold reflect normal operation of the respective system component. For each signal (S1) a univariate distance to its associated alarm thresholds (H1/L1) is computed to quantify a degree of abnormality for the respective system component. Based on the univariate distances an aggregate abnormality indicator (AAI) is computed which reflects the technical status of the entire technical system (200). A comparison of the aggregate abnormality indicator (AAI) with a predetermined abnormality threshold (AAT) is provided to an operator (10).
展开▼