Abstract: In a case where supervised (learning) data is prepared and the case where test data is prepared, the data is recorded with time information attached to the data. The method includes clustering the learning data in a target class and clustering the test data in the target class. Then, the probability density for each of identified subclasses is calculated for each of time intervals having various time points and widths for the learning data, and is calculated for each of time intervals in the latest time period which have various widths, for the test data. Then, a ratio between a probability density obtained when learning is performed and a probability density obtained when testing is performed is obtained as a relative frequency in each of the time intervals for each of the subclasses. Input having a relative frequency that statistically and markedly increases is detected as an anomaly.

Abstract: A computer implemented method and system for calculating a degree of similarity between two graphs whose nodes are respectively given discrete labels include providing, for each of the two graphs, label values respectively to a given node and nodes adjacent thereto so that different ones of the discrete labels correspond to different ones of the label values. The nodes are sequentially tracing for each of the two graphs, and, during the tracing of the nodes, a new label value is calculated through a hash calculation using a label value of a currently visited node and also using label values of nodes adjacent to the currently visited node to update the label value to the currently visited node. The degree of similarity between the two graphs is calculated on the basis of the number of the label values having been given to nodes of the two graphs and agreeing between the two graphs.

Abstract: A computer implemented method and system for calculating a degree of similarity between two graphs whose nodes are respectively given discrete labels include providing, for each of the two graphs, label values respectively to a given node and nodes adjacent thereto so that different ones of the discrete labels correspond to different ones of the label values. The nodes are sequentially tracing for each of the two graphs, and, during the tracing of the nodes, a new label value is calculated through a hash calculation using a label value of a currently visited node and also using label values of nodes adjacent to the currently visited node to update the label value to the currently visited node. The degree of similarity between the two graphs is calculated on the basis of the number of the label values having been given to nodes of the two graphs and agreeing between the two graphs.

Abstract: A method applied to a computer that determines a situation of a system includes the steps of: receiving measurement data from each of a plurality of measurement targets in the system; computing a plurality of sets of anomaly values based on the measurement data and a predetermined computation algorithm according to a plurality of classifications corresponding to a plurality of properties of each measurement target; and determining the situation of the system based on the sets of anomaly values and a predetermined determination algorithm.

Abstract: A computer-implemented method, program, and system for calculating similarity between nodes in a graph by computer processing. The method includes: calculating a new label value of a node on the basis of a label value of a node adjacent to the node with respect to each of the nodes in one or more graphs; correcting the new label value of the adjacent node to remove an influence of the label value of a target node with respect to each of the target nodes for the calculation of the similarity between the nodes; and calculating the similarity between the target nodes by using the corrected new label value of the node adjacent to one target node and the corrected new label value of the node adjacent to another target node.

Abstract: Different virtual labels, for example, like +1 and ?1, are assigned to two data sets. A change analysis problem for the two data sets is reduced to a supervised learning problem by using the virtual labels. Specifically, a classifier such as logical regression, decision tree and SVM is prepared and is trained by use of a data set obtained by merging the two data sets assigned the virtual labels. A feature selection function of the resultant classifier is used to rank and output both every attribute contributing to classification and its contribution rate.

Abstract: Location estimation systems, methods, and non-transitory computer program products. The system includes: storage means provided in the computer, means for storing the vector datasets in the storage means of the computer, means for calculating the similarity between the vector dataset without any location label and each neighboring vector dataset with a location label, by using any one of a q-norm where 0?q?1 and an exponential attenuation function, and means for estimating the location label of the vector data without any location label from the calculated similarities.

Abstract: Provided is a system including sensors to measure objects to obtain first measurement values, respectively. A first server computes a correlation among the first measurement values based on the first measurement values. A proxy computes an actual measurement value of a second measurement value based on the first measurement values and a given function. A second server verifies the sensors by setting one or more sensors as verification target sensors in turn at predetermined timing. The second server computes a predicted value of the second measurement value based on the correlation and the first measurement values obtained from the other sensors except the verification target sensors among the plurality of sensors. The first or second servers and the proxy outputs the predicted value of the second measurement value instead of the actual measurement value thereof during the verification of the verification target sensors if an anomalous sensor is identified.

Abstract: Provided is a method applied to a system including a plurality of sensors, a proxy, and a server. The method includes: measuring objects by the plurality of sensors to obtain first measurement values; computing a correlation among the first measurement values by the server based on the first measurement values; computing an actual measurement value of a second measurement value by the proxy based on the first measurement values and a given function; verifying the plurality of sensors by setting one or more sensors as verification target sensors in turn by the server at predetermined timing; computing a predicted value of the second measurement value by the server based on the correlation and the first measurement values obtained from the other sensors; and outputting the predicted value of the second measurement value instead of the actual measurement value thereof at least during the verification of the verification target sensors.

Abstract: A method and an inspection apparatus for inspecting an information processing unit to which software update is applied. The apparatus includes a collection component configured to collect the behavior, for a plurality of times of software update, of the information processing unit to which one software update is applied. The apparatus also includes a determination component configured to compare the behavior collected for the plurality of times of software update to one another to determine whether the behavior of the information processing unit after the one software update is applied thereto is normal.

Abstract: A mechanism is provided to improve the availability of an ICS and an external system that uses data from the ICS by ensuring operation of the ICS and operation of the system even if an anomaly has occurred in a device in the ICS. The mechanism receives measured data from the plurality of devices, calculates prediction data by using the measured data and correlation information used for deriving prediction data for correlated devices, and provides the measured data and the prediction data.

Abstract: Location estimation systems, methods, and non-transitory computer program products. The system includes: storage means provided in the computer, means for storing the vector datasets in the storage means of the computer, means for calculating the similarity between the vector dataset without any location label and each neighboring vector dataset with a location label, by using any one of a q-norm where 0?q?1 and an exponential attenuation function, and means for estimating the location label of the vector data without any location label from the calculated similarities.

Abstract: A computer implemented method and system for calculating a degree of similarity between two graphs whose nodes are respectively given discrete labels include providing, for each of the two graphs, label values respectively to a given node and nodes adjacent thereto so that different ones of the discrete labels correspond to different ones of the label values. The nodes are sequentially tracing for each of the two graphs, and, during the tracing of the nodes, a new label value is calculated through a hash calculation using a label value of a currently visited node and also using label values of nodes adjacent to the currently visited node to update the label value to the currently visited node. The degree of similarity between the two graphs is calculated on the basis of the number of the label values having been given to nodes of the two graphs and agreeing between the two graphs.

Abstract: A location estimation method using label propagation. The achieved location estimation method is robust to variations in radio signal strengths and is highly accurate by using the q-norm (0<q<1), especially, for calculating the similarities among radio signal strength vectors. The accuracy in location estimation is further improved by putting more importance on the time-series similarities. Specifically, the time-series similarity is calculated by using time-series values indicating the temporal order of radio signal strengths during the measurement. If the time-series similarity is larger than the similarity between the radio signal strength vectors, the time-series similarity is preferentially used. The exponential attenuation function can also be used for calculating the similarities, instead of the q norm (0<q<1).

Abstract: A computer-implemented method, program, and system for calculating similarity between nodes in a graph by computer processing. The method includes: calculating a new label value of a node on the basis of a label value of a node adjacent to the node with respect to each of the nodes in one or more graphs; correcting the new label value of the adjacent node to remove an influence of the label value of a target node with respect to each of the target nodes for the calculation of the similarity between the nodes; and calculating the similarity between the target nodes by using the corrected new label value of the node adjacent to one target node and the corrected new label value of the node adjacent to another target node.

Abstract: Different virtual labels, for example, like +1 and ?1, are assigned to two data sets. A change analysis problem for the two data sets is reduced to a supervised learning problem by using the virtual labels. Specifically, a classifier such as logical regression, decision tree and SVM is prepared and is trained by use of a data set obtained by merging the two data sets assigned the virtual labels. A feature selection function of the resultant classifier is used to rank and output both every attribute contributing to classification and its contribution rate.

Abstract: Provided is a system that generates models for classifying input data into a plurality of classes on the basis of training data previously classified into the plurality of classes. The system includes a sampling unit and a learning unit. The sampling unit samples, from the training data, a plurality of datasets each including a predetermined number of elements classified into a minority class and a corresponding number of elements classified into a majority class, the corresponding number being determined in accordance with the predetermined number. The learning unit learns each of a plurality of models for classifying the input data into the plurality of classes, by using a machine learning technique on the basis of each of the plurality of sampled datasets.

Abstract: A location estimation method using label propagation. The achieved location estimation method is robust to variations in radio signal strengths and is highly accurate by using the q-norm (0<q<1), especially, for calculating the similarities among radio signal strength vectors. The accuracy in location estimation is further improved by putting more importance on the time-series similarities. Specifically, the time-series similarity is calculated by using time-series values indicating the temporal order of radio signal strengths during the measurement. If the time-series similarity is larger than the similarity between the radio signal strength vectors, the time-series similarity is preferentially used. The exponential attenuation function can also be used for calculating the similarities, instead of the q norm (0<q<1).

Abstract: It is an object of the invention to measure the change in action potential waveforms during administration of a drug by testing in cultured cells or in animals, and using this measurement to evaluate the influence of administration of the drug on biological parameters, thereby providing an approach to evaluating the effect on individual channels of a cell. The invention provides a biological parameter output apparatus that contains at least one piece of waveform information that includes at least one piece of biological parameter information, which is a set of a biological parameter identifier and a biological parameter value, and action potential waveform information, receives input of action potential waveform information, acquires at least one piece of biological parameter information based on the action potential waveform information, and outputs the at least one biological parameter information acquired.

Abstract: It is an object of the invention to measure the change in action potential waveforms during administration of a drug by testing in cultured cells or in animals, and using this measurement to evaluate the influence of administration of the drug on biological parameters, thereby providing an approach to evaluating the effect on individual channels of a cell. The invention provides a biological parameter output apparatus that contains at least one piece of waveform information that includes at least one piece of biological parameter information, which is a set of a biological parameter identifier and a biological parameter value, and action potential waveform information, receives input of action potential waveform information, acquires at least one piece of biological parameter information based on the action potential waveform information, and outputs the at least one biological parameter information acquired.