Abstract: Methods, systems, and apparatus, including computing device programs encoded on computing device storage media, for characterizing events in a data stream. In one of the methods a General Method, is used to construct a Specific Method, which performs the characterization of behavioral types of a particular system or set of systems. The Specific Method includes event extraction, dimensional reduction, and signature identification in the reduced dimensional space that map the events of a specific system into behavioral types.

Abstract: A method for organizing, visualizing, and navigating data objects within a dataset is presented, including network visualization alongside a detailed information display. The method includes interactivity with the visualization through network panning, zooming, and node clicking. The network nodes represent the data objects. Node proximity and links represent similarity or other relatedness measures between respective data objects. The network can be displayed in full to illustrate large scale properties. Clicking the nodes provides further data object information of the highlighted node, which is displayed alongside the network.