Abstract: Disclosed are an apparatus and method for detecting an abnormal connection. The apparatus for detecting an abnormal connection includes a log pattern identifier configured to identify a plurality of connection patterns each indicating connection stages from log data regarding a system connection; and a log analyzer configured to perform at least one of a first log analysis for detecting an abnormal connection stage pair indicated by a specific connection pattern among the plurality of connection patterns and a second log analysis for detecting an abnormal connection pattern indicating a specific connection stage pair among the plurality of connection patterns.

Abstract: Provided is an apparatus for determining whether to change resources using pattern information. The apparatus includes a reception unit which receives resource information which is information about an amount of resources used of a plurality of servers which exist in a data center which provides resources to a user, a basic data generation unit which generates basic data about predetermined items in preset time units using the resource information, a pattern information generation unit which generates pattern information using the basic data, and a resource change determination unit which determines whether to increase, maintain, or reduce the resources using the generated pattern information.