Abstract: A database management system, comprising: a storage adapted for storing: a plurality of data objects organized according to a data model, and a plurality of stream operator wrappers each wrapping a stream operator and having at least one port for receiving, via a network, instructions for: scheduling activation of the wrapped stream operator, connecting the wrapped stream operator with another stream operator wrapped by another of the plurality of stream operator wrappers, and/or deploying the wrapped stream operator; a processing circuitry for executing the plurality of stream operator wrappers.

Abstract: A device detects anomalies on an input stream of events. Each event includes a value. The device has: a modeling unit configured to represent each event into at least one histogram over a predefined tree data structure to obtain a model of the input stream; a change detection and adaptation module configured to detect a long term change of the distribution of the events in the input stream based on the model of the input stream; and a scoring unit configured to calculate an anomaly score representing the probability of an anomaly in the input stream of events based on the model of the input stream and the detected long term change.