Abstract: A computer-implemented method for determining an abnormal technical status of a technical system includes: receiving, from the technical system, a plurality of signals, each signal being sampled over time and reflecting the technical status of at least one system component; computing, for each signal with associated high and low alarm thresholds obtained from an alarm management system, at every sampling time point, a univariate distance to its associated alarm thresholds as a maximum of the distances between a value of the respective signal and its associated alarm thresholds to quantify a degree of abnormality for the respective at least one system component; computing, at every sampling time point, based on the univariate distances at the respective sampling time points, an aggregate abnormality indicator reflecting the technical status of the technical system; and providing, to an operator, a comparison of the aggregate abnormality indicator with a predetermined abnormality threshold.

Abstract: An apparatus for alarm information determination includes: an input unit; a processing unit; and an output unit. The input unit provides the processing unit with historical process control data, the process control data including a plurality of data signals, a plurality of alarm data, and data relating to an event of interest. The processing unit determines a plurality of correlation scores for the plurality of data signals paired with the plurality of alarm data, a correlation score being determined for a data signal paired with an alarm data, a high correlation score indicating a higher degree of correlation than a low correlation score. The processing unit identifies at least one first alarm data from the plurality of alarm data, the identification including utilization of the data relating to the event of interest.