Abstract: A database management system, comprising: a storage adapted for storing: a plurality of data objects organized according to a data model, and a plurality of stream operator wrappers each wrapping a stream operator and having at least one port for receiving, via a network, instructions for: scheduling activation of the wrapped stream operator, connecting the wrapped stream operator with another stream operator wrapped by another of the plurality of stream operator wrappers, and/or deploying the wrapped stream operator; a processing circuitry for executing the plurality of stream operator wrappers.

Abstract: A device detects anomalies on an input stream of events. Each event includes a value. The device has: a modeling unit configured to represent each event into at least one histogram over a predefined tree data structure to obtain a model of the input stream; a change detection and adaptation module configured to detect a long term change of the distribution of the events in the input stream based on the model of the input stream; and a scoring unit configured to calculate an anomaly score representing the probability of an anomaly in the input stream of events based on the model of the input stream and the detected long term change.

Abstract: An input stream of events is processed to obtain an output stream of events. Consecutive events are selected from the input stream using a sliding window to obtain sliding window events, then a function is applied thereto to obtain an output result value. Operations of: outputting the output result value in the output stream; splitting the sliding window events into filter-complying events and pending events; applying the function on the pending events to obtain preliminary value(s); selecting, from the input stream, a second plurality of events; adding the second plurality of events to the sliding window events; removing, from the sliding window events, the filter-complying events to obtain a new set of sliding window events; and applying the function to the second plurality of events and the preliminary value(s) to obtain a new output result value, are then iteratively performed.