Abstract: A method for predicting a future stage of an attack on a computer system. The method comprises performing, by the computer system, linguistic analysis on threat intelligence reports, where the threat intelligence reports comprise known stages of the attack. The method also comprises processing, by the computer system, the linguistic analysis with a transition matrix to determine probabilities of cause-and-effect relationships between the known stages of the attack, updating, by the computer system, a probability model based on the probabilities determined by the transition matrix, and predicting, by the computer system, the future stage of the attack based on the probability model and attack classifications.

Abstract: A technique of managing electrical power sharing between consumers connected to a local power grid by determining for each consumer, the amount of electrical power stored in a power storage and the amount of electrical power required for consumption; receiving a retail tariff and an export tariff for electrical power; calculating a total power consumption tariff, based on the total stored and required amount of electrical power; calculating a power sharing tariff based on the received retail tariff, the export tariff, and the total power consumption tariff. Also, determining a consumer to share electrical power based on the calculated power sharing tariff; and allocating energy resources between the consumer and a power storage to maintain balance within the local power grid. Calculation of the power sharing tariff is based on maintaining the total power consumption tariff such that a portion of the electrical power is maintained within the local power grid.

Abstract: Systems and methods of managing power distribution in a portion of an electrical power grid with at least one power storage, including: receiving at least one power consumption rule from at least one consumer of the power grid, analyzing power consumption data from at least one power consumption meter connected to the power grid, applying the at least one power consumption rule on the analyzed power consumption data, based on forecasted data, and managing power consumption for the at least one consumer, based on the result of the at least one power consumption rule, and also based on a power capacity status of the at least one power storage.

Abstract: System and method of disaggregating power consumption data, the method including receiving power consumption data from at least one power consumption meter, wherein the received power consumption data corresponds to at least one consumer, determining power consumption patterns from the received power consumption data, performing disaggregation of the received power consumption data and identifying at least one base load value for at least one consumer based on the power consumption patterns, grouping consumers into energetically similar groups based on the disaggregation, and providing energy saving recommendations to at least one consumer based on the disaggregation and grouping data.

Abstract: Systems and methods of managing an electricity distribution grid, including receiving a layout of at least one electricity distribution grid coupled to at least one power distributor facility, each grid having at least two electrical power nodes, collecting data for at least one consumer of the electricity distribution grid, assigning a dynamic consumer value to each of the at least one consumer according to predefined attributes, determining aggregated power consumption values for each electrical power node, wherein for each electrical power node the aggregated power consumption values are received for all consumers assigned thereto, and allocating resources of the at least one power distributor facility, from the first electrical power node to the second electrical power node, if the difference between the compared consumer values exceeds a predetermined threshold.

Abstract: A method, non-transitory computer readable medium, and device includes monitoring a session layer and transport layer network traffic data received from a plurality of client computing devices and plurality of servers. A plurality of network traffic anomaly threshold values and a plurality of server health anomaly threshold values for the monitored session layer and the transport layer network traffic data are estimated. Whether a plurality of current network traffic anomaly values and a plurality of current server health anomaly values for the monitored network traffic data exceeds each of the corresponding estimated plurality of network traffic anomaly threshold values and the estimated plurality of server health anomaly threshold values, and whether the current plurality of network traffic anomaly values and the current plurality of server health anomaly values are not a false anomaly is determined. A mitigation action is initiated based on the determination.

Abstract: Systems and methods of managing an electricity distribution grid, including receiving a layout of at least one electricity distribution grid coupled to at least one power distributor facility, each grid having at least two electrical power nodes, collecting data for at least one consumer of the electricity distribution grid, assigning a dynamic consumer value to each of the at least one consumer according to predefined attributes, determining aggregated power consumption values for each electrical power node, wherein for each electrical power node the aggregated power consumption values are received for all consumers assigned thereto, and allocating resources of the at least one power distributor facility, from the first electrical power node to the second electrical power node, if the difference between the compared consumer values exceeds a predetermined threshold.

Abstract: System and method of forecasting power consumption, including receiving power consumption data from at least one power consumption meter, wherein the received power consumption data corresponds to at least one consumer, determining power consumption patterns from the received power consumption data, forecasting future behavior of power consumption for at least one consumer, based on historical power consumption data and the power consumption patterns, and determining energy saving recommendations to at least one consumer based on the forecasting.

Abstract: System and method of disaggregating power consumption data, the method including receiving power consumption data from at least one power consumption meter, wherein the received power consumption data corresponds to at least one consumer, determining power consumption patterns from the received power consumption data, performing disaggregation of the received power consumption data and identifying at least one base load value for at least one consumer based on the power consumption patterns, grouping consumers into energetically similar groups based on the disaggregation, and providing energy saving recommendations to at least one consumer based on the disaggregation and grouping data.

Abstract: A method, non-transitory computer readable medium, and anomaly detection apparatus that monitors network traffic exchanged with a plurality of client devices and a plurality of server devices to obtain client-side signal data for a plurality of client-side signals and server-side signal data for a plurality of server-side signals. A determination is made when a server health anomaly or a network traffic anomaly is a false positive based at least in part on a comparison of at least a portion of the client-side signal data or at least a portion of the server-side signal data to a historical scoreboard database comprising historical data regarding one or more historical network traffic or server health anomalies. A mitigation action is initiated when the determining indicates that one or more of the server health anomaly or network traffic anomaly is not a false positive.

Abstract: Systems and methods of determining power production in an electrical power grid, with receiving of weather data for a geographical area, wherein the weather data includes values corresponding to prospective production of power from a renewable energy source, collecting power consumption data for consumers of an electrical power grid in the geographical area, identifying at least one consumer having an inverse relationship between the collected power consumption data and received weather data, assigning a power production value to the identified consumers, based on a comparison between the collected power consumption data and received weather data, determining total power production in the electrical power grid for all identified consumers, comparing power consumption data to the received weather data, and determining type of renewable energy source based on a correlation between power consumption and weather data for the same time period.

Abstract: There is provided a method of operating a self-organizing network and system thereof. The method comprises processing data informative of network events with regard to the one or more access points and respectively served clients, thereby periodically associating the clients with the one or more access points; periodically assessing to each access point a value indicative of a privilege level of a given access point, the value being a function of priority values assigned to clients associated with the given access point during an assessing period; and using the assessed values for periodically identifying at least one access point requiring at least one corrective action in consideration of its privilege level. The method can further comprise periodically reassigning at least part of priority values to be used for assessing the values to the one or more access points, wherein reassigning comprises processing data periodically received by the SON system.

Abstract: There is provided a method of operating a self-organizing network and system thereof. The method comprises processing data informative of network events with regard to the one or more access points and respectively served clients, thereby periodically associating the clients with the one or more access points; periodically assessing to each access point a value indicative of a privilege level of a given access point, the value being a function of priority values assigned to clients associated with the given access point during an assessing period; and using the assessed values for periodically identifying at least one access point requiring at least one corrective action in consideration of its privilege level. The method can further comprise periodically reassigning at least part of priority values to be used for assessing the values to the one or more access points, wherein reassigning comprises processing data periodically received by the SON system.

Abstract: There is provided a method of operating a self-organizing network and system thereof. The method comprises processing data informative of network events with regard to the one or more access points and respectively served clients, thereby periodically associating the clients with the one or more access points; periodically assessing to each access point a value indicative of a privilege level of a given access point, the value being a function of priority values assigned to clients associated with the given access point during an assessing period; and using the assessed values for periodically identifying at least one access point requiring at least one corrective action in consideration of its privilege level. The method can further comprise periodically reassigning at least part of priority values to be used for assessing the values to the one or more access points, wherein reassigning comprises processing data periodically received by the SON system.

Abstract: There is provided a method of operating a self-organizing network and system thereof. The method comprises processing data informative of network events with regard to the one or more access points and respectively served clients, thereby periodically associating the clients with the one or more access points; periodically assessing to each access point a value indicative of a privilege level of a given access point, the value being a function of priority values assigned to clients associated with the given access point during an assessing period; and using the assessed values for periodically identifying at least one access point requiring at least one corrective action in consideration of its privilege level. The method can further comprise periodically reassigning at least part of priority values to be used for assessing the values to the one or more access points, wherein reassigning comprises processing data periodically received by the SON system.

Abstract: There is provided a method of analyzing data collected in a cellular network and system thereof. The method comprises: repeatedly processing a first subset of the collected data to geo-locate mobile devices, thereby giving rise to geo-location data informative of geo-located mobile devices and associated time-stamped geo-locations thereof, wherein geo-locating is provided with the help of a geo-locating transformation function generated by unsupervised learning, by the processor, of a second subset of the collected data.

Abstract: There is provided a method of operating a self-organizing network and system thereof. The method comprises processing data informative of network events with regard to the one or more access points and respectively served clients, thereby periodically associating the clients with the one or more access points; periodically assessing to each access point a value indicative of a privilege level of a given access point, the value being a function of priority values assigned to clients associated with the given access point during an assessing period; and using the assessed values for periodically identifying at least one access point requiring at least one corrective action in consideration of its privilege level. The method can further comprise periodically reassigning at least part of priority values to be used for assessing the values to the one or more access points, wherein reassigning comprises processing data periodically received by the SON system.

Abstract: There is provided a method of analysing data collected in a cellular network and system thereof. The method comprises: repeatedly processing a first subset of the collected data to geo-locate mobile devices, thereby giving rise to geo-location data informative of geo-located mobile devices and associated time-stamped geo-locations thereof, wherein geo-locating is provided with the help of a geo-locating transformation function generated by unsupervised learning, by the processor, of a second subset of the collected data.

Abstract: A first embodiment of the system and method of this invention is disclosed in a distributed computer system. The system is monitored by detecting activity signatures of individually identifiable network components, programs and/or PCs by sensing operations (keystrokes on a keyboard or mouse clicks) and/or codes embedded in data streams in the system. The activity signatures can be defined by result-specific character sets and are generated or provided for identifying the various activities of the system. After the activity signatures are generated, select information about select baselined attributes of activities detected by their activity signatures are measured and compiled in a database, and monitoring profiles (MPs) for the baselined attributes of activities are generated. The MPs are defined by a group of identifying attribute values of end-points so abnormal behavior of end-points/components can later be detected. For example, a disconnected server associated with a group of terminals can be detected.