Patent 9355007 was granted and assigned to Amazon on May, 2016 by the United States Patent and Trademark Office.
A method and apparatus for identifying abnormal clusters are disclosed. In the method and apparatus, host activity data is received and cluster processing is performed on the host activity data of the plurality of hosts to determine the presence of any abnormal clusters of abnormal host activity data. The cluster processing results in a yielded clusters that are then compared with baseline clusters to identify the abnormal clusters.