G06N99005
Please help me predict the CPC LABEL for this patentPATENT ABSTRACT: In a host device, a method for performing an anomaly analysis of a computer environment includes applying a learned behavior function to a data training set and to a set of data elements received from at least one computer environment resource to define at least one learned behavior boundary relative to at least one cluster of data elements of the data training set; applying a sensitivity function to the at least one cluster to define a sensitivity boundary relative to at least one learned behavior boundary, the sensitivity boundary related to a variance associated with the at least one cluster and to a mean value of the at least one cluster; and identifying a data element of the set of data elements as an anomalous data element when the data element of the set of data falls outside of the sensitivity boundary.