Abstract: An observation information processing apparatus calculates, for each mesh, a support and a confidence. The observation information processing apparatus generates an adjacent mesh set by merging adjacent ones of the meshes. The observation information processing apparatus calculates, based on a support and a confidence of each mesh included in the adjacent mesh set, a confidence for each adjacent mesh, and sets the smallest one of the confidences calculated as a new confidence threshold value. The observation information processing apparatus detects and excludes meshes to be excluded from meshes included in the adjacent mesh set, based on the confidences and supports of the meshes included in the adjacent mesh set and the confidence threshold value.

Abstract: The matching apparatus 100 stores, with respect to a branching pattern included in event patterns 140a, a reception time of an event that serves as the branching point in a source node that indicates the transition destination of the event, connects the source node to the branch node by a transition with an interval condition, connects the branch nodes to the link node that indicates the linking point at which these branch nodes are linked together, and thereby generates NFAs 140b. Then, the matching apparatus 100 compares event streams 140c with the NFAs 140b to determine whether the event streams 140c includes the event patterns 140a.

Abstract: An analysis method executed by a computer, the analysis method includes: detecting a plurality of staying points where one or more mobile bodies stayed in accordance with a plurality of trace data associated with trajectories of the one or more mobile bodies; comparing, in accordance with the plurality of trace data, a first ending time of stay in a first staying point selected from among the plurality of staying points with second ending times of stay in one or more second staying points which are similar to the first staying point; and determining feature of the first staying point in accordance with a result of the comparison.

Abstract: An extraction program causes a computer to execute a process. The process includes adding an event to a first pattern including the events according to the sequential order, thus generating a second pattern in such a manner that the second pattern is generated by adding the event when a first value is less than a predetermined threshold; when the event is added, adding a predetermined value to the first value, and adding the predetermined value to a second value in a column corresponding to an end of the added event among second values corresponding to respective columns of a table; extracting the second pattern that satisfies a predetermined condition; and when an event in a second or subsequent column in the table is added.

Abstract: When a second pattern is to be generated by adding an event to a first pattern including events, an extraction program causes a computer to execute the following process based on combinations of events. That is, the extraction program causes the computer to generate the second pattern when the number of occurrence, in the second pattern, of each of the events included in the combinations is not more than a threshold. The extraction program causes the computer to calculate, based on data including a plurality of events, a frequency at which one or more of the generated second patterns occur in the data. The extraction program causes the computer to extract the second pattern having the frequency satisfying a predetermined condition. The extraction program causes the computer to add a new event to the extracted second pattern.

Abstract: According to one aspect, a computer-readable recording medium stores therein an extracting program 330a causing a computer to execute a process. The process includes based on event data obtained by associating a plurality of events stored in a storage unit and an occurrence time of each event, sequentially adding an event to a first pattern obtained by associating the plurality of events and the occurrence order of each event, and sequentially generating a second pattern which includes the first pattern and occurs in the event data; and extracting a pattern which satisfies a predetermined condition from the generated second pattern.

Abstract: A computer-readable storage medium storing an update program that causes a computer to execute a process includes: acquiring an automaton performing matching of data in an input stream hierarchized by tags to a keyword in a query, the automaton in which an initial state, a start state indicating a start tag symbol, an end state indicating an end tag symbol, a transition between the initial state and the start state, a transition between the initial state and the end state, and a transition from the initial state to the initial state are defined; generating a path identifying the position of a start tag based on a hierarchy in the input stream when the start tag is read from the input stream; judging whether or not the generated path meets a condition corresponding to the keyword in the query; generating, when the generated path is judged to meet a condition.

Abstract: A method for detecting an abnormal transition pattern from a transition pattern includes: first extracting an episode pattern with an appearance frequency greater than or equal to a first frequency from an episode pattern represented with a description form so as to include a first transition pattern and a second transition pattern differing in an order of a part of items from the first transition pattern to have a complementary relation thereto; second extracting a third transition pattern with an appearance frequency greater than or equal to a second frequency from the transition pattern; and specifying a transition pattern other than the third transition pattern from transition patterns included in the extracted episode pattern, and determining an abnormal transition pattern based on the transition pattern specified in the specifying when the third transition pattern includes a fourth transition pattern corresponding to the extracted episode pattern in the first extracting.

Abstract: An apparatus for evaluating a performance of a program includes: a storage unit for storing the program embedded with a plurality of trace statements; a processor executes a process including: executing the program embedded with a plurality of trace statements cyclically; calculating each time intervals of each cycle of execution of the program from a start test program till an end program; and evaluating the performance of the program on the basis of information of the time intervals.

Abstract: A virtual machine monitor for a virtual machine. The virtual machine monitor makes the processor in the virtual machine: receive a timer setting from the guest OS in place of the timer, the timer setting being for making the timer generate a timer interrupt after a lapse of a setting period; change, when the guest OS inputs or outputs data from or to the I/O device via the virtual machine monitor, the setting period set in the timer so that a relation between I/O wait time recognized by the guest OS and I/O process time other than the I/O wait time becomes approximate to a relation between the I/O wait time recognized by the virtual machine monitor and the I/O process time; set the timer setting with the changed setting period in the timer; and notify, when receiving the timer interrupt, the guest OS of occurrence of the timer interrupt.

Abstract: A collation device generates an NFA by generating an automaton corresponding to an event pattern, replicating an automaton part corresponding to the same series part in which events are connected in the same series in the generated automaton for a plurality of series, substituting each replicated automaton part with a transition that is received in an event of each series, and combining each substituted automaton part through an ? transition. In addition, the collation device collates whether or not the event pattern is included in an event stream by comparing the event stream and the NFA and receiving an event included in the event stream in an NFA part corresponding to a series in which the event occurs out of the replicated NFA parts and operating the NFA part.

Abstract: A trajectory interpolation apparatus is disclosed. The first storage part stores first time and first location information of a movable body at the first time. The second storage stores second time and second location information of the movable body at the second time. The calculation part calculates a first moving distance from the first time and a second moving distance from the second time based on a relationship between the time and the speed stored in the second storage part, regarding third time between the first time and the second time. The determination part determines, as the interpolation point, one of intersection points for a circle in which the first location is set as its center and the first moving distance is set as its radius, and another circle in which the second location is set as its center and the second moving distance is set as its radius.

Abstract: A data partitioning apparatus receives stream data and stores with previous-and-subsequent information that specifies data previous and subsequent to the data. Then, for groups, each of which contains the data that are stored and that are partitioned into the number of the groups, the data partitioning apparatus stores top information specifying data located at the top in a corresponding group and end information specifying data located at the end in the corresponding group. Then, when new data is stored, the data partitioning apparatus specifies data previous and subsequent to the new data and stores the new data by associating it with the previous-and-subsequent information that specifies the data previous and subsequent to the new data. Then, when data is inserted, the data partitioning apparatus updates information for each group such that the difference between the number of data belonging to each group is equal to or less than one.

Abstract: An apparatus includes a unit dividing a region into blocks having a predetermined bit length and generating addition data having the predetermined bit length corresponding to coordinate data, a unit storing storage data having the predetermined bit length, a unit generating composite data having a bit length twice the length of the predetermined bit length by connecting the addition data to the storage data, and storing the composite data, and a unit repeating an operation of designating the bit length of the composite data as the predetermined bit length, instructing to generate the addition data, and instructing to generate and store the composite data. The number of different bits between a bit string of a location corresponding to the input coordinate data and a bit string of a reference location tends to increase as a distance between the location corresponding to the coordinate data and the reference location increases.

Abstract: The matching apparatus 100 stores, with respect to a branching pattern included in event patterns 140a, a reception time of an event that serves as the branching point in a source node that indicates the transition destination of the event, connects the source node to the branch node by a transition with an interval condition, connects the branch nodes to the link node that indicates the linking point at which these branch nodes are linked together, and thereby generates NFAs 140b. Then, the matching apparatus 100 compares event streams 140c with the NFAs 140b to determine whether the event streams 140c includes the event patterns 140a.

Abstract: A matching device builds a parse tree from an event pattern. The matching device builds an automaton by, while traversing the parse tree, joining child nodes of an AND node in parallel to the AND node and joining child nodes of an OR node in parallel to the OR node. The matching device performs matching of determining whether an event stream includes the event pattern by comparing the event stream with the automaton.

Abstract: An apparatus extracts an area having a highest score or a lowest score that is calculated based on evaluation values of points from a target area including a set of a plurality of points that can be distributed at two-dimensional coordinates. It determines whether the area extracted and an area overlapping a plurality of the target areas intersect with each other, and deletes an area having a lower score or a higher score out of the areas determined to intersect with each other. It selects an area having a highest score or a lowest score out of the areas extracted at the extracting and not deleted at the determining.

Abstract: A computer-readable recording medium stores therein an information retrieving program that causes a computer to execute acquiring a document to be searched and having a hierarchical structure; generating a path schema related to the acquired document; receiving input of a retrieval keyword, a retrieval condition for the retrieval keyword, and a retrieval equation specifying a retrieval range for the retrieval keyword; generating a single automaton that includes a hierarchy retrieval automaton that retrieves a hierarchy of the generated path schema and a hit keyword retrieval automaton that retrieves a hit keyword satisfying the retrieval condition, the single automaton making state transition between a hit hierarchical node where the hit keyword in the hierarchy retrieval automaton is present and a set of nodes representing the hit keyword; retrieving, from the document and using the single automaton, the hit keyword within the retrieval range; and outputting a retrieval result.

Abstract: This invention is to appropriately support creation of a classification rule for a new data item. This method includes: storing a new data item and a category of the new data item into a storage; extracting feature patterns each including a condition including a feature element of the new data item stored in the storage and a corresponding category from data stored in a correct answer data storage, which stores data items and categories of the data items, and storing the feature patterns into a feature pattern storage; and grouping the feature patterns stored in the feature pattern storage into a first set whose feature pattern matches with the category of the new data item stored in the storage and a second set whose feature pattern does not match with the category of the new data item, and storing a grouping result into a group data storage.

Abstract: A virtual machine monitor for a virtual machine. The virtual machine monitor makes the processor in the virtual machine: receive a timer setting from the guest OS in place of the timer, the timer setting being for making the timer generate a timer interrupt after a lapse of a setting period; change, when the guest OS inputs or outputs data from or to the I/O device via the virtual machine monitor, the setting period set in the timer so that a relation between I/O wait time recognized by the guest OS and I/O process time other than the I/O wait time becomes approximate to a relation between the I/O wait time recognized by the virtual machine monitor and the I/O process time; set the timer setting with the changed setting period in the timer; and notify, when receiving the timer interrupt, the guest OS of occurrence of the timer interrupt.