公开(公告)号：US20210200773A1

公开(公告)日：2021-07-01

申请号：US16728425

申请日：2019-12-27

Applicant: INTERSET SOFTWARE INC.

Inventor： Shaun Pilkington ,  Stephan F. Jou ,  Ross Diener

IPC: G06F16/2457 ,  G06F7/58

Abstract: A computing device includes a processor and a medium storing instructions. The instructions are executable by the processor to: receive a database query for an approximate aggregation of a numerical value of a plurality of records, wherein each record includes the numerical value and a filter value; in response to the database query, determine a count of records that have filter values within an importance threshold associated with the database query; and determine the approximate aggregation of the numerical value based on the count of records and the importance threshold associated with the database query.

公开(公告)号：US11449514B2

公开(公告)日：2022-09-20

申请号：US16728425

申请日：2019-12-27

Applicant: INTERSET SOFTWARE INC.

Inventor： Shaun Pilkington ,  Stephan F. Jou ,  Ross Diener

IPC: G06F16/2457 ,  G06F7/58

Abstract: A computing device includes a processor and a medium storing instructions. The instructions are executable by the processor to: receive a database query for an approximate aggregation of a numerical value of a plurality of records, wherein each record includes the numerical value and a filter value; in response to the database query, determine a count of records that have filter values within an importance threshold associated with the database query; and determine the approximate aggregation of the numerical value based on the count of records and the importance threshold associated with the database query.

公开(公告)号：US11438348B2

公开(公告)日：2022-09-06

申请号：US16833302

申请日：2020-03-27

Applicant: INTERSET SOFTWARE INC.

Inventor： Ross Diener ,  Shaun Pilkington ,  Maria Pospelova

IPC: G06N5/04 ,  H04L9/40 ,  G06N20/00 ,  G06F21/55

Abstract: An apparatus may include a processor that may be caused to access a distribution of a plurality of values, each value of the plurality of values quantifying an event of an event type in a computer network. The processor may determine a mean of the plurality of values and a second highest value of the plurality of values, generate an expected maximum of the distribution based on the mean and the second highest value, and access a first value quantifying a first event of the event type in the computer network. The processor may further determine that the first event is an anomalous event based on the first value and the expected maximum.