Detective method and system for activity-or-behavior model construction and automatic detection of the abnormal activities or behaviors of a subject system without requiring prior domain knowledge

摘要

A detective method, applied in a detective system comprising an activity-or-behavior model constructor, for activity-or-behavior model construction and automatic detection of activities of a subject system, comprises steps of using an unsupervised machine learning technique, a Natural Language Processing technique (NLP) and a supervised machine learning technique. As such, an activity-or-behavior model is built for predicting the future behaviors of the subject system and automatically detecting abnormal activities or behaviors of the subject system. The activity-or-behavior model is capable to handle multidimensional sensor data input from a plurality of sensor data streams and incorporate the sensor data values and a selected temporal information about at least one sensor data stream and between different sensor data streams.