Abstract: Disclosed herein are systems and methods for reducing or mitigation alert fatigue from real-time alerts in cyber-physical systems or other types of edge computing systems are provided. In one or more examples, the edge computing system monitor can look for one or more patterns within received data that can indicate malicious activity or other conditions that may warrant a real-time or near-real time response from the operator. In one or more examples, a detection of any of the specified patterns in the streaming data can trigger an alert to the operator of the edge computing system. In one or more examples, the alerts can be suppressed until the number of alerts associated with a particular pattern crosses a pre-determined threshold. Additionally or alternatively, alerts can be suppressed based on a duration that the alerts have been generated. The suppression of alerts can be configured to reduce operator alert fatigue.

Abstract: Accordingly, systems and methods for facilitating operator assisted responses to real-time alerts in cyber-physical systems or other types of edge computing systems are provided. In one or more examples, an edge computing system of an enterprise computing network (where an operator is stationed to operate it), can comprise an edge computing system monitor. In one or more examples, the edge computing system monitor can receive streaming analytic data from one or more components of the edge computing system. In one or more examples, the edge computing system monitor can look for one or more patterns within the received data that can be indicative of malicious activity or other conditions that may warrant a real-time or near-real time response from the operator. In one or more examples, a detection of any of the specified patterns in the streaming data can trigger an alert to the operator of the edge computing system.