IMPROVEMENT OF THE METHOD OF CENTRALIZED DETECTION OF DISTRIBUTED ANOMALIES IN THE ALGORITHM FOR SEARCHING MAIN COMPONENTS

Abstract

The method of anomaly detection is improved according to the method of main components in computer systems in the network, which allowed to apply it not to one computer station, but to a group of stations in which a self-organized distributed system of anomaly detection in computer systems is installed. network, which, in contrast to known solutions, in application allowed to reduce the amount of data and, accordingly, speed up their exchange between system components.

The practical significance of the obtained results lies in the developed architecture and components of the distributed anomaly detection system in computer systems, which synthesizes the requirements of self-organization, centralization, distribution, multilevel and creates a self-organized distributed system.

Experimental studies with the developed implementation of a self-organized distributed system for detecting anomalies in computer systems have confirmed the effectiveness of the proposed solutions and the developed distributed system for its operation in the computer network.