Content uploaded by Igor A. Trubin
Author content
All content in this area was uploaded by Igor A. Trubin on Apr 25, 2020
Content may be subject to copyright.
Performance Anomaly and Change Point Detection
For Large-Scale System Management
!
"#
$ !%&"$&
ABSTRACT
"""'"("("')
" && !" * ""&
"&+ " & ,- ./01 2
3&" 4 " 546 ""& !" "
2""& .01 .701 ! "
(" (" "& .0 " )
" " "&" *" &
""(" 8"" ("& $ "
" "" ' !" )& "
"&+ " ) * * ""&
& "" " "*!"
"""&$
KEYWORDS
* ""&1 &" ""&1
! " (" )"&1 *" ")&"1
&&$
1INTRODUCTION
"" &"" & &*
")&" """ ("*
" 9 "+ " " )'
&":
3&"!" "" )& "
& " ' ' )" (" "
9""&")""("$
")"(&"!"") "
(";,< """ ""
! ") " &" " "
&(""&$
"" " " (" "&" & !"
""""&":
& 3&" " 2""&
*"526'& !" "'
,- " 5& &"
" " ) & " ")&"
" ""6$
* ( 9 "$$
'!""($"&"&
'"$
# " 2(" "& !"
"" * &"" ! "
*" ")&" &"
") )"&$
"""&+ " &="
="' 5"" "6 "*!"
!&"*$
2Statistical Exception and
Trend Detection System
(SETDS)
2 "* .0 ) &
>" ""& &("
!"*&($ &"
3&" 4 " 546 !"
"; " 4 !"&"
;" ""& *" &*
,""& &*
")&"""$
" - " /$ " ( * ' 2
*9" !* /?@
'"" &"' ":!""
")""&";" " "&" A*
& $
/
!
- "/:B" !"($B "&""
"3&" 4 "546.0'& !&*
* &" 5 "6 " && "
* * C""&"!"'"" &
5B<;<<6"& ""
" ) *$ " &
'( * ' " ''""**
"* '" " "
""$ " 4 " ""&
&" !*( "DEV(t)=0E"+
'""Ft’ ""&"$
"&!" """&"&""'
& ) " &" "
"&" $ B !" ) "
& "' ! &
"&& "")"&'- "$
- ":"'")"&&:
!"*($)&"""&"
(""4!"G "")"&& !"
&& " " " && *
! ""&$ & !"("
!* ! "" " !* &"
")&" 5"$$ B " -$/6
! ""& 5"$$ !" )& "; "
-$/ "& &6$ # " "
&!*&&") " !" ) *"
" .0 " ' *
& ! *&""!* 2
& ) * /?@'""
9"("") " 5
*"6$
3Anomaly Detection by
Neural Network
""& ! !* * "
*" ")&" 5"$$ ""
C""'" &<!&
' " *& ")"&6 & !" " !*
=" ="'$-$7'")"! !*
" H *" &" &
' " " ' -$/ 7
&"": <5" & &"6
< D8E 5& !" !&G!
""6$#*"'*""&&-$
/$ " && D&'!* E < '
"! / &'"()<
"")"'"""&)
"")"&$
&*2" "("
&" " " " '
&"&* " "" "" " " "
* !*!" >" &"
< < D8E " D "&E "
="&"9&"&*$
")"&&!"">)"" "
!* &" ) ' >"
" "! " !*
C"&"!*"'*")"& &
"*" '*&"""$
- "7:2""<"=" ="'2""&
D=E5<6
4 Entropy-based Method of Anomaly
Detection
"'&"")>")
( !G"& & ) " ""$ -
"3" & !" "(" & "
("G " !" " & !G"&
5I6 *("("*)"$
" "" & ""&
!"( ) *" ) !G"& !* " "
"* ) "& !G"& !* " )'
) .J0:
¿xi
xavg
xi
xavg
∗ln ¿
nIC=1
n∗ln
(
n
)
∑
i=1
n
¿
6
"")"!G"&"("":
nIC=9"!&""K&"
!")!"(5"$$ *6
3 " " "& ( " )" "( 5"$$
&"& 6
" """(5"$$ *6
" niC ( " (" ) /$DE"
&""* !&" 5"$$ ) I G
" & !" ) " " 6
/&"""$-"3")
" I " !"( )
*)""nIC !"
!" &")&"'""'
"!""&"""""("*)"$
& " ""I&"")*
'")"&$
REFERENCES
./0 L"C"* # 9" " $ /MMJ$ MASF - Multivariate
Adaptive Statistical Filtering. &$ ) "
," ""I $//$
.0 !$@$ Exception Based Modeling and Forecasting$
&$) "," ""I $
.70 !$/7$Review of IT Control Chart$L =
AM@A4$=//=("!"/7$
.0 ! " $ /?$ Systems and methods for modeling
computer resource metrics$"/7A?MA$
.J0 " <!9$ //. Quantifying Imbalance in Computer
Systems$&$) "," ""I
/