Abstract: A cyber security system includes a plurality of event sensors to detect events, a plurality of inference servers, and a server in communication with the plurality of inference servers. Each inference server of the plurality is in communication with a subset of event sensors of the plurality of event sensors. Each inference server has a portion of an event lattice and is to compare the event detected by the subset of event sensors to the event lattice. Each inference server is to identify an originator having a behavior pattern indicative of an attack and communicating an identifier associated with the originator. The server is to provide an interface indicating the behavior pattern indicative of an attack and the identifier of the originator.

Abstract: A cyber security system includes a plurality of event sensors to detect events, a plurality of inference servers, and a server in communication with the plurality of inference servers. Each inference server of the plurality is in communication with a subset of event sensors of the plurality of event sensors. Each inference server has a portion of an event lattice and is to compare the event detected by the subset of event sensors to the event lattice. Each inference server is to identify an originator having a behavior pattern indicative of an attack and communicating an identifier associated with the originator. The server is to provide an interface indicating the behavior pattern indicative of an attack and the identifier of the originator.

Abstract: A method of determining a set of future actions includes providing an interface to a user, the interface including an adjustable element associated with a future value of an influencer. The influencer is associated with an action. The method further includes receiving via the interface an adjusted future value of the influencer, projecting a future value of a performance indicator based at least in part on the adjusted future value of the influencer, and providing a results interface to the user indicative of the future value of the performance indicator.

Abstract: A cyber security system includes a plurality of event sensors to detect events, a plurality of inference servers, and a server in communication with the plurality of inference servers. Each inference server of the plurality is in communication with a subset of event sensors of the plurality of event sensors. Each inference server has a portion of an event lattice and is to compare the event detected by the subset of event sensors to the event lattice. Each inference server is to identify an originator having a behavior pattern indicative of an attack and communicating an identifier associated with the originator. The server is to provide an interface indicating the behavior pattern indicative of an attack and the identifier of the originator.

Abstract: A cyber security system includes a plurality of event sensors to detect events, a plurality of inference servers, and a server in communication with the plurality of inference servers. Each inference server of the plurality is in communication with a subset of event sensors of the plurality of event sensors. Each inference server has a portion of an event lattice and is to compare the event detected by the subset of event sensors to the event lattice. Each inference server is to identify an originator having a behavior pattern indicative of an attack and communicating an identifier associated with the originator. The server is to provide an interface indicating the behavior pattern indicative of an attack and the identifier of the originator.

Abstract: A method of performing predictive analysis includes generating, using a computational device, an instance from an unstructured data source. The method further includes associating a variable entity with the instance. The variable entity is associated with an influencer of a set of influencers or a performance indicator of a set of performance indicators. In another example, the method includes determining, using the computational device, a value of the variable entity from the instance based on a value-detection rule and generating, using the computational device, a model associating the set of influencers with the set of performance indicators using the value of the variable entity.

Abstract: A method of determining a set of prescribed actions includes receiving a configuration script identifying a set of influencers, a set of performance indicators, a model type, a target time, and a prescription method. The method further includes deriving a model of the model type based on data associated with the set of influencers or with the set of performance indicators. The method also includes projecting a set of future influencer values associated with the set of influencers and projecting a set of future indicator values of the set of performance indicators at the target time using the model. The method can further include prescribing using the prescription method and based on projecting using the model a set of prescribed actions associated with the subset of actionable influencers. The method also includes displaying the set of prescribed actions.

Abstract: A method for drilling a well includes prescribing a drill recipe with a drill analysis engine based on a field-specific model. The drill recipe identifies prescribed segments, mud flow parameters, and drill parameters. Each prescribed segment of the prescribed segments includes a start depth. The method further includes initiating drilling of the well based on the drill recipe; receiving a drill log in narrative text format; detecting a drill event inconsistent with the drill recipe by analyzing the drill log with a log analysis engine; prescribing an adjusted drill recipe with the drill analysis engine based on the field-specific model in response to the drill event, the adjusted drill recipe including adjusted prescribed segments; and drilling the well based on the adjusted drill recipe.

Abstract: A method for determining a drill event includes receiving a set of historic drill reports with annotations. The historic drill reports include a plurality of entries including multiple acronyms relating to a single drilling factor. A set of entries of the plurality of entries indicates an associated depth. The method further includes training a report analysis engine utilizing the historic drill reports and annotations; receiving a drill report associated with a well; and determining a drill event and associated depth utilizing the report analysis engine applied to the drill report.

Abstract: An exemplary method of analyzing a well log includes imaging a well log to form a well log image, performing pattern recognition on the well log image to determine pattern data, and determining stratigraphic structure data based on the pattern data. Another exemplary method of improving production from a stratigraphic structure includes performing pattern recognition on a well log image stored in an image format to determine pattern data, determining stratigraphic structure data using a computer-based structure analyzer based on the pattern data, and projecting well parameters based on the stratigraphic structure data. An exemplary system includes a scanner to scan a raster image of a printed well log and a computational system in communication with the scanner to receive the raster image. The computational system includes a pattern recognition analyzer to determine pattern data from the raster image and a structure analyzer to determine stratigraphic structure based on the pattern data.

Abstract: A method of determining a set of prescribed actions includes receiving a configuration script identifying a set of influencers, a set of performance indicators, a model type, a target time, and a prescription method. The method further includes deriving a model of the model type based on data associated with the set of influencers or with the set of performance indicators. The method also includes projecting a set of future influencer values associated with the set of influencers and projecting a set of future indicator values of the set of performance indicators at the target time using the model. The method can further include prescribing using the prescription method and based on projecting using the model a set of prescribed actions associated with the subset of actionable influencers. The method also includes displaying the set of prescribed actions.

Abstract: A system includes a field-specific model; a log analysis engine; a drill analysis engine; an interface; and computational circuitry in communication with the field-specific model, the log analysis engine, the drill analysis engine, and the interface. The computational circuitry is to: prescribe a drill recipe using the drill analysis engine based on the field-specific model, the drill recipe identifying prescribed segments, mud flow parameters, and drill parameters, each prescribed segment of the prescribed segments including an associated depth; receive a drill log in narrative text format via the interface; detect a drill event inconsistent with the drill recipe by analyzing the drill log with the log analysis engine; and prescribe an adjusted drill recipe using the drill analysis engine based on the field-specific model in response to the drill event, the adjusted drill recipe including adjusted prescribed segments.

Abstract: An exemplary method of analyzing a well log includes imaging a well log to form a well log image, performing pattern recognition on the well log image to determine pattern data, and determining stratigraphic structure data based on the pattern data. Another exemplary method of improving production from a stratigraphic structure includes performing pattern recognition on a well log image stored in an image format to determine pattern data, determining stratigraphic structure data using a computer-based structure analyzer based on the pattern data, and projecting well parameters based on the stratigraphic structure data. An exemplary system includes a scanner to scan a raster image of a printed well log and a computational system in communication with the scanner to receive the raster image. The computational system includes a pattern recognition analyzer to determine pattern data from the raster image and a structure analyzer to determine stratigraphic structure based on the pattern data.

Abstract: A method for drilling a well includes prescribing a drill recipe using a drill analysis engine based on a field-specific model. The drill recipe identifies prescribed segments. Each prescribed segment of the prescribed segments includes a start depth. The method further includes initiating drilling of the well based on the drill recipe; detecting a drill event inconsistent with the drill recipe; prescribing an adjusted drill recipe using the drill analysis engine based on the field-specific model in response to the drill event, the adjusted drill recipe including adjusted prescribed segments; and drilling the well based on the adjusted drill recipe.

Abstract: A method of digitizing a well log includes identifying automatically with a computational circuitry a legend and at least one graph of the well log; determining based on a machine learning a parameter of the at least one graph indicated in the legend; and digitizing the at least one graph based on the parameter.

Abstract: A method of digitizing a well log includes identifying automatically with a computational circuitry a legend and at least one graph of the well log; determining based on a machine learning a parameter of the at least one graph indicated in the legend; and digitizing the at least one graph based on the parameter.

Abstract: A method of digitizing a well log includes identifying automatically with a computational circuitry a legend and at least one graph of the well log; determining based on a machine learning a parameter of the at least one graph indicated in the legend; and digitizing the at least one graph based on the parameter.

Abstract: A method of digitizing a well log includes identifying automatically with a computational circuitry a legend and at least one graph of the well log; determining based on a machine learning a parameter of the at least one graph indicated in the legend; and digitizing the at least one graph based on the parameter.

Abstract: A method of projection a production characteristic includes receiving down well video image data depicting multiphase flow within the well, determining a flow rate data of at least one phase of the multiphase flow based on the down well video image data, and projecting the production characteristic based at least in part on the determined flow rate using a well performance model.

Abstract: A method of allocating a fixed resource includes displaying an interface control in a user interface display. The interface control includes at least three continuous value control elements associated with a group including at least three categories. Each continuous value control element is associated with a value associated with a category of the group. The operator of the values associated with the at least three continuous value control elements is equal to a fixed quantity. In response to a first user input, a first continuous value control element is locked to fix the value associated with the first continuous value control element. In response to a second user input, a second continuous value control element is adjusted to change the value associated with the second continuous value control element.