Abstract: In recognizing plans of agents, the actions of the agents are observed. Based on the observed actions and plans stored in a plan library, a pending set of actions that are pending execution by the agent are generated. Explanations for these pending actions are then generated. The plan library contains plans, the plans stored in the plan library include typed variables and/or temporal constraints, and the explanations depend on the typed variables and/or temporal constraints. Probabilities as to the likelihood that the explanations represent at least one actual plan of the agent may be computed, and at least one of the explanations may be recognized as the actual plan of the agent based on the computed probabilities.

Abstract: A system and method analyzes queries in a computer network, and identifies problem-causing queries that could be harmful to the system. If a query does not match any queries in a database, the query is transmitted to its destination. If a query matches a query in the database, that query is blocked from transmission to the destination. If a query is transmitted to its destination, and it is later determined that query caused a problem on that destination, that query is added to the database of queries. In one embodiment, a query that does not cause any problems is written to a pool of current up-to-date backup databases that may be used if the main system goes down. In another embodiment, the system tests variants of a query that caused a problem at the destination to attempt to discover other queries that could cause a problem.

Abstract: A plan recognition model is arranged to recognizing a plan based on observed actions as contained in an audit log. An audit log containing a collection of observed actions of at least one agent is read, and the observed actions contained in the audit log are compared to plan actions contained in plans stored in a plan library. Explanations for the observed actions are generated based on the comparison of the observed actions to plan actions, and at least one of the explanations is selected as a best fit for the observed actions. The selected explanation is provided as an output.

Abstract: A system and method for automatically gathering information to assist in evaluating an actor in an environment. The method includes monitoring information relating to the actor. The existence of a querying situation is then automatically recognized. The querying situation implicates a mental of physical status of the actor or environment, and is based upon at least one factor apart from a direct request by the actor for assistance. In response to the recognition that a querying situation exists, a query is formulated and then automatically posed. In one embodiment, the query is posed to the actor. In another embodiment, the query is posed to a person having knowledge of the actor's activities. In yet another embodiment, the monitored information is used as the basis for recognizing the existence of a querying situation.