Abstract: A method and a device for detecting incidents in a local area network by way of an incident detection device, the incident detection device being connected to the local area network via a wide area network, a data collection agent collecting data describing the local area network. The device is able to detect various types of anomaly and receives messages from the collection agent, validates and aggregates data contained in each received message into groups of data, calculates a severity score for each group of data, for each type of anomaly and calculates a total severity score for each group of data, calculates a total criticality score from all of the total severity scores, and generates recommendation messages or corrective actions at least on the basis of the total criticality score.

Abstract: A method and a device for detecting incidents in a local area network by way of an incident detection device, the incident detection device being connected to the local area network via a wide area network, a data collection agent collecting data describing the local area network. The device is able to detect various types of anomaly and receives messages from the collection agent, validates and aggregates data contained in each received message into groups of data, calculates a severity score for each group of data, for each type of anomaly and calculates a total severity score for each group of data, calculates a total criticality score from all of the total severity scores, and generates recommendation messages or corrective actions at least on the basis of the total criticality score.