Abstract: In the method of the invention said detection is performed in an Anomaly Detection System, or ADS, by analyzing the behavior of a network and looking for deviations with respect to a normality, said normality indicating common behavior of users of said network and being defined previous to said detection. The method is characterised in that it comprises building a plurality of detection models, each of said plurality of detection models adapted to different entities of said network and to different algorithms, said different algorithms implementing different detection strategies and said plurality of detection models representing said normality. The system of the invention is arranged to implement the method of the invention.

Abstract: A computer implemented method for tracking and checking measures and computer programs thereof. A master node receiving from a plurality of slaves nodes messages related with measures generated by the slaves nodes, the method including: capturing, a traffic driver unit, the messages sent by the slaves nodes and further sending them to a monitor unit; analyzing, the monitor unit, the received messages so as to detect, by a behavioral learning technique, anomalies in the messages; when an anomaly is detected, sending, the monitor unit, the detected anomaly to a regenerator unit for regenerating at least the detected anomaly by a prediction technique; and injecting, said traffic drive unit, measures regenerated by the regenerator unit to the transport network.