OBSERVED EVENT DETERMINATION APPARATUS, OBSERVED EVENT DETERMINATION METHOD, AND COMPUTER READABLE RECORDING MEDIUM
20210271993 · 2021-09-02
Assignee
Inventors
Cpc classification
Y02A10/40
GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
G06F9/542
PHYSICS
International classification
Abstract
An observed event determination apparatus 10, includes: a data receiving unit 11 configured to receive observed event data indicating an observed event; and a data determining unit 12 configured to determine whether or not the received observed event data is not needed based on pieces of observed event data other than the received observed event data and knowledge data.
Claims
1. An observed event determination apparatus, comprising: a data receiving unit configured to receive observed event data indicating an observed event; and a data determining unit configured to determine whether or not the received observed event data is not needed based on pieces of observed event data other than the received observed event data and knowledge data.
2. The observed event determination apparatus according to claim 1, wherein the data determining unit performs an analysis on the received observed event data based on the knowledge data, and determines that the received observed event data is not needed if it is determined that the received observed event data can be derived from the analysis result and the other pieces of observed event data.
3. The observed event determination apparatus according to claim 1, wherein the data determining unit performs backward inference on the received observed event data, and determines that the received observed event data is not needed on a condition that, with respect to the obtained inference result, when the inference is traced back from the received observed event data, any of the other pieces of observed event data are necessarily reached.
4. The observed event determination apparatus according to claim 1, wherein the data determining unit determines, on a condition that the received observed event data and an event expected to be observed hold true at the same time, that the received observed event data is not needed if the event expected to be observed has not been observed, or if the event expected to be observed cannot be derived by backward inference from another observation based on the knowledge data.
5. An observed event determination method, comprising: receiving observed event data indicating an observed event; and determining whether or not the received observed event data is not needed based on pieces of observed event data other than the received observed event data and knowledge data.
6. The observed event determination method according to claim 5, wherein, in the determining, an analysis is performed on the received observed event data based on the knowledge data, and it is determined that the received observed event data is not needed if it is determined that the received observed event data can be derived from the analysis result and the other pieces of observed event data.
7. The observed event determination method according to claim 5, wherein, in the determining, backward inference is performed on the received observed event data, and it is determined that the received observed event data is not needed on a condition that, with respect to the obtained inference result, when the inference is traced back from the received observed event data, any of the other pieces of observed event data are necessarily reached.
8. The observed event determination method according to claim 5, wherein, in the determining, it is determined, on a condition that the received observed event data and an event expected to be observed hold true at the same time, that the received observed event data is not needed if the event expected to be observed has not been observed, or if the event expected to be observed cannot be derived by backward inference from another observation based on the knowledge data.
9. A non-transitory computer-readable recording medium that includes a program recorded thereon, the program including instructions that cause the computer to carry out: receiving observed event data indicating an observed event; and determining whether or not the received observed event data is not needed based on pieces of observed event data other than the received observed event data and knowledge data.
10. The non-transitory computer-readable recording medium according to claim 9, wherein, in the determining, an analysis is performed on the received observed event data based on the knowledge data, and it is determined that the received observed event data is not needed if it is determined that the received observed event data can be derived from the analysis result and the other pieces of observed event data.
11. The non-transitory computer-readable recording medium according to claim 9, wherein, in the determining, backward inference is performed on the received observed event data, and it is determined that the received observed event data is not needed on a condition that, with respect to the obtained inference result, when the inference is traced back from the received observed event data, any of the other pieces of observed event data are necessarily reached.
12. The non-transitory computer-readable recording medium according to claim 9, wherein, in the determining, it is determined, on a condition that the received observed event data and an event expected to be observed hold true at the same time, that the received observed event data is not needed if the event expected to be observed has not been observed, or if the event expected to be observed cannot be derived by backward inference from another observation based on the knowledge data.
Description
BRIEF DESCRIPTION OF THE DRAWINGS
[0021]
[0022]
[0023]
[0024]
[0025]
[0026]
[0027]
[0028]
EXAMPLE EMBODIMENT
Example Embodiment
[0029] Hereinafter, an observed event determination apparatus, an observed event determination method, and a computer readable recording medium according to the present example embodiment of the invention will be described with reference to
[0030] [Configuration of the Invention]
[0031] First, the configuration of the observed event determination apparatus according to the present example embodiment of the invention will be described.
[0032] The observed event determination apparatus 10 according to the present example embodiment shown in
[0033] The data receiving unit 11 receives observed event data indicating an observed event. The observed event data includes an observation such as “isFile(Data)”, for example. The observation is a conjunction of first-ordered literals. The data determining unit 12 determines whether or not the received observed event data is not needed based on pieces of observed event data other than the received observed event data and knowledge data.
[0034] As described above, in the present example embodiment, it is appropriately determined whether or not the received observed event data is needed, and the observed event data that is not needed in the inference is specified. According to the present example embodiment, the increase in time needed for deriving a hypothesis due to accumulation of the observed event data in a large amount can be suppressed.
[0035] Next, the function of the observed event determination apparatus 10 according to the present example embodiment will be described using
[0036] In the present example embodiment, the data determining unit 12, first, executes an analysis on the received observed event data based on knowledge data. Also, the data determining unit 12, if it is determined that the received observed event data can be derived from the analysis result and other pieces of observed event data, determines that the received observed event data is not needed.
[0037] Specifically, it is assumed that observed event data “isFile(Data)” has been observed as an observation P, and pieces of observed event data “isText(Data)”, “!isZip(Data)”, and “!isPacket(Data)” are observed as an observation O′, as shown in
[0038] In this case, the data determining unit 12 acquires “isText(Data)”, “!isZip(Data)”, and “!isPacket(Data)” as the analysis result of the observation P, for example. Also, in the example in
[0039] Moreover, the extension function of the data determining unit 12 will be described using
[0040] In the example in
[0041] Next, the data determining unit 12 determines that the received observed event data is not needed on a condition that, with respect to the obtained inference result, when the inference is traced back from the received observed event data, any of the other pieces of observed event data are necessarily reached.
[0042] Specifically, in the example in
[0043] Incidentally, in the example in
[0044] In contrast, in the example in
[0045] Also,
[0046]
[0047] In other words, in the example in
[0048] Specifically, it is assumed that “M(x)” has been observed as an observation M, as shown in
[0049] Under this condition, consider a situation in which “A(x)”, “B(x)”, and “C(x)” have been observed as an observation O′, and on the other hand, “D(x)” and “E(x)” have not been observed. Here, if an event N(y) expected to be observed has not been observed, or N(y) cannot be acquired as the hypothesis by backward inference from the observations M and O′ based on the knowledge data, the data determining unit 12 determines that the observation M is not needed.
[0050] Here, the extension function shown in
(group 1) [0051] A(x).Math.M(x) [0052] B(x).Math.M(x) [0053] C(x).Math.M(x)
(group 2) [0054] D(x).Math.M(x){circumflex over ( )}N(y) [0055] E(x).Math.M(x){circumflex over ( )}N(y)
(group 3) [0056] F(x).Math.M(x){circumflex over ( )}L(y) [0057] G(x).Math.M(x){circumflex over ( )}L(y)
[0058] In the aforementioned example, if A(x), B(x), and C(x) are observed, and N(y) and L(y) are not observed or not obtained as a hypothesis, the data determining unit 12 determines that M(x) is not needed (can be deleted) based on the analysis (backward inference) using the knowledge data of the group 1.
[0059] Also, in the aforementioned example, if A(x), B(x), C(x), D(x), and E(x) are observed, and L(y) is not observed or not obtained as a hypothesis, the data determining unit 12 determines that M(x) is not needed (can be deleted) based on the analysis (backward inference) using the knowledge data of the groups 1 and 2.
[0060] Moreover, in the aforementioned example, if A(x), B(x), C(x), F(x), and G(x) are observed, and N(y) is not observed or not obtained as a hypothesis, the data determining unit 12 determines that M(x) is not needed (can be deleted) based on the analysis (backward inference) using the knowledge data of the groups 1 and 3.
[0061] Also, as shown in the following, it is assumed that each knowledge data includes M(x){circumflex over ( )}K(z) in the consequent. In this case, if M(x) and K(z) have been observed, it may be obvious that the data determining unit 12 can execute determination similarly to the example described above. That is, “M(x)” in the example described above need only be replaced by “M(x){circumflex over ( )}K(z)”.
(group 1) [0062] A(x).Math.M(x){circumflex over ( )}K(z) [0063] B(x).Math.M(x){circumflex over ( )}K(z) [0064] C(x).Math.M(x){circumflex over ( )}K(z)
(group 2) [0065] D(x).Math.M(x){circumflex over ( )}K(z){circumflex over ( )}N(y) [0066] E(x).Math.M(x){circumflex over ( )}K(z){circumflex over ( )}N(y)
(group 3) [0067] F(x).Math.M(x){circumflex over ( )}K(z){circumflex over ( )}L(y) [0068] G(x).Math.M(x){circumflex over ( )}K(z){circumflex over ( )}L(y)
[0069] Also, as shown in the following, it is assumed that knowledge data is present in which a plurality of literals are present in the antecedent. In this case, the data determining unit 12 determines that the literal in the consequent is not needed (can be deleted) on the condition that all of the literals in the antecedent have been observed.
A1(x){circumflex over ( )}A2(x).Math.M(x)
B1(x){circumflex over ( )}B2(x).Math.M(x)
[0070] [Apparatus Operations]
[0071] Next, the operations of the observed event determination apparatus 10 according to the present example embodiment of the invention will be described using
[0072] As shown in
[0073] Next, the data determining unit 12 performs analysis (backward inference) by applying knowledge data to each observed event data received in step A1, and generates hypothesis candidates based on the analysis (step A2).
[0074] Next, the data determining unit 12 selects one of the pieces of observed event data (observations) as a determination target (step A3).
[0075] Next, the data determining unit 12 selects one of the logical formulas that form conjunction with the observation that is the determination target selected in step A3 (step A4).
[0076] Next, if the observation selected in step A4 has been observed, or can be generated as a hypothesis candidate by backward inference from another observation, the data determining unit 12 extracts this observation as a related logical formula of the determination target selected in step A3 (step A5).
[0077] Next, the data determining unit 12 determines whether or not the processing in step A5 has been ended with respect to all of the logical formulas that form conjunction with the observation that is the determination target selected in step A3 (step A6).
[0078] If, as a result of the determination in step A6, the processing in step A5 has not been ended with respect to all of the logical formulas that form conjunction with the observation that is the determination target selected in step A3, the data determining unit 12 again executes processing in step A4.
[0079] On the other hand, if as a result of the determination in step A6, the processing in step A5 has been ended with respect to all of the logical formulas that form conjunction with the observation that is the determination target selected in step A3, the data determining unit 12 executes processing in step A7.
[0080] In step A7, the data determining unit 12 traces back the inference from the observation that is the determination target selected in step A3 and from the conjunction between this and the related logical formula.
[0081] Also, the data determining unit 12 determines, based on the result in step A7, whether or not, when the inference is traced back from the observation that is the determination target selected in step A3 and the conjunction between this and the related logical formula, a hypothesis candidate that matches any of the pieces of observed event data (observations) received in step A1 is necessarily reached (step A8).
[0082] As a result of the determination in step A8, if a hypothesis candidate that matches any of the pieces of observed event data (observations) received in step A1 is not reached, the data determining unit 12 executes the processing in step A10.
[0083] On the other hand, as a result of the determination in step A8, if a hypothesis candidate that matches any of the pieces of observed event data (observations) received in step A1 is reached, the data determining unit 12 deletes the observation that is the determination target selected in step A3 (step A9). Thereafter, the data determining unit 12 executes the processing in step A10.
[0084] In step A10, the data determining unit 12 determines whether or not a piece of observed event data that has not been selected as the determination target is present. As a result of the determination in step A10, if a piece of observed event data that has not been selected as the determination target is present, the data determining unit 12 again executes the processing in step A3.
[0085] On the other hand, As a result of the determination in step A10, if a piece of observed event data that has not been selected as the determination target is not present, the data determining unit 12 ends the processing.
Specific Example
[0086] Next, a specific example will be described using
[0087] First, it is assumed that “A(x).Math.M(x)”, “B(x).Math.M(x)”, “C(x).Math.M(x)”, “D(x).Math.M(x){circumflex over ( )}N(y)”, “E(x).Math.M(x){circumflex over ( )}N(y)”, “F(x).Math.M(x){circumflex over ( )}L(y)”, “G(x).Math.M(x){circumflex over ( )}L(y)”, “H(x).Math.M(x){circumflex over ( )}R(y)”, “N(y).Math.Q(y)”, “R(y).Math.U(y)”, “S(x).Math.C(x)”, and “T(x).Math.C(x)” are the knowledge data, as shown in
[0088] (Step A1)
[0089] As shown in
[0090] (Step A2)
[0091] Next, the data determining unit 12 performs the backward inference by applying the knowledge data to each piece of observed event data, and with this, generates hypothesis candidates. The generation result of hypothesis candidates is as shown by the directed graph in
[0092] (Steps A3 and A4)
[0093] Next, the data determining unit 12 selects M(x) as the observed event data. In
[0094] (Step A5)
[0095] For example, it is assumed that L(y) has been selected, in step A4, as the logical formula that forms a conjunction with M(x). Because L(z) is present in the observed event data, the data determining unit 12 extracts L(y) as a related logical formula.
[0096] Also, it is assumed that N(y) has been selected as the logical formula that forms a conjunction with M(x). Although N(y) is not present in the observed event data, “N(y).Math.Q(y)” is present in the knowledge data and Q(y) is present in the observed event data, and therefore N(y) can be generated as a hypothesis candidate. Therefore, the data determining unit 12 extracts N(y) as a related logical formula.
[0097] Moreover, it is assumed that R(y) has been selected as the logical formula that forms a conjunction with M(x). R(y) is not present in the observed event data, and furthermore, although “R(y).Math.U(y)” is present in the knowledge data, U(y) is not present in the observed event data, and therefore R(y) cannot be generated as the hypothesis candidate. Therefore, the data determining unit 12 does not extract R(y) as the related logical formula.
[0098] (Steps A7 and A8)
[0099] The data determining unit 12 traces back the inference from M(x), from M(x){circumflex over ( )}L(z), and from M(x){circumflex over ( )}N(y), and determines whether or not a hypothesis candidate that matches any of the pieces of observed event data (observation) is reached.
[0100] Specifically, a hypothesis candidate A(X) that is present at a node that can be reached from M(X) matches the observation A(X), and similarly, a hypothesis candidate B(X) matches the observation !B(X). Also, C(X) that is present at a node that can be reached from M(X) does not match any of the observations, but S(X) and !T(X) that are present at nodes that can be reached by further tracing back match the observation. Moreover, F(X) and !G(X) that are present at nodes that can be reached from M(x){circumflex over ( )}L(z) also match the observation. Also, D(X) and ! E(X) that are present at nodes that can be reached from M(X){circumflex over ( )}N(Y) also match the observation.
[0101] (Step A9)
[0102] As a result of the determination in step A8, it is determined that, as a result of tracing back the inference from the observation that is the determination target, and from the conjunction between the observation and a related logical formula, a hypothesis candidate that matches any of the observations is necessarily reached. Therefore, the data determining unit 12 deletes M(X). Note that, if it is assumed that “!T(X)” has not been observed, in this case, as a result of tracing back the inference from the observation that is the determination target and the conjunction between the observation and a related logical formula, a hypothesis candidate that matches any of the observations is not necessarily reached, and therefore M(X) will not be deleted.
[0103] [Effects of Present Example Embodiment]
[0104] As described above, according to the present example embodiment, whether or not observed event data is needed is appropriately determined, and observed event data that is not needed in inference is specified and deleted. As a result, the increase in time needed to derive a hypothesis due to accumulation of observed event data in a large amount can be suppressed.
[0105] [Program]
[0106] A program according to the present example embodiment need only be a program for causing a computer to perform steps A1 to A10 shown in
[0107] Also, the program according to the present example embodiment may also be executed by a computer system that includes a plurality of computers. In this case, for example, each of the computers may function as any of the data receiving unit 11 and the data determining unit 12.
[0108] [Physical configuration]
[0109] A description will now be given, with reference to
[0110] As shown in
[0111] The CPU 111 loads the program (codes) according to the present example embodiment that is stored in the storage device 113 to the main memory 112 and executes the codes in a predetermined order, thereby performing various kinds of computation. The main memory 112 is typically a volatile storage device such as a DRAM (Dynamic Random Access Memory). The program according to the present example embodiment is provided in a state of being stored in a computer-readable recording medium 120. Note that the program according to the present example embodiment may also be distributed on the Internet to which the computer is connected via the communication interface 117.
[0112] Specific examples of the storage device 113 may include a hard disk drive, a semiconductor storage device such as a flash memory, and the like. The input interface 114 mediates data transmission between the CPU 111 and input devices 118 such as a keyboard and a mouse. The display controller 115 is connected to a display device 119 and controls a display in the display device 119.
[0113] The data reader/writer 116 mediates data transmission between the CPU 111 and the recording medium 120, reads out the program from the recording medium 120, and writes, in the recording medium 120, the results of processing performed by the computer 110. The communication interface 117 mediates data transmission between the CPU 111 and other computers.
[0114] Specific examples of the recording medium 120 may include a general-purpose semiconductor storage device such as a CF (Compact Flash (registered trademark)) or an SD (Secure Digital), a magnetic recording medium such as a Flexible Disk, and an optical recording medium such as a CD-ROM (Compact Disk Read Only Memory).
[0115] Note that, the observed event determination apparatus 10 according to the present example embodiment may also be realized using hardware that corresponds to each of the units, rather than a computer in which the program is installed. Furthermore, the observed event determination apparatus 10 may be partially realized by a program, and the remainder may be realized by hardware.
[0116] Part of, or the entire present example embodiment described above can be expressed by the following (Supplementary note 1) to (Supplementary note 12), but is not limited thereto.
[0117] (Supplementary Note 1)
[0118] An observed event determination apparatus, including:
[0119] a data receiving unit configured to receive observed event data indicating an observed event; and
[0120] a data determining unit configured to determine whether or not the received observed event data is not needed based on pieces of observed event data other than the received observed event data and knowledge data.
[0121] (Supplementary Note 2)
[0122] The observed event determination apparatus according to supplementary note 1,
[0123] wherein the data determining unit performs an analysis on the received observed event data based on the knowledge data, and determines that the received observed event data is not needed if it is determined that the received observed event data can be derived from the analysis result and the other pieces of observed event data.
[0124] (Supplementary Note 3)
[0125] The observed event determination apparatus according to supplementary note 1 or 2,
[0126] wherein the data determining unit performs backward inference on the received observed event data, and determines that the received observed event data is not needed on a condition that, with respect to the obtained inference result, when the inference is traced back from the received observed event data, any of the other pieces of observed event data are necessarily reached.
[0127] (Supplementary Note 4)
[0128] The observed event determination apparatus according to any of supplementary notes 1 to 3,
[0129] wherein the data determining unit determines, on a condition that the received observed event data and an event expected to be observed hold true at the same time, that the received observed event data is not needed if the event expected to be observed has not been observed, or if the event expected to be observed cannot be derived by backward inference from another observation based on the knowledge data.
[0130] (Supplementary Note 5)
[0131] An observed event determination method, including:
[0132] (a) a step of receiving observed event data indicating an observed event; and
[0133] (b) a step of determining whether or not the received observed event data is not needed based on pieces of observed event data other than the received observed event data and knowledge data.
[0134] (Supplementary Note 6)
[0135] The observed event determination method according to supplementary note 5,
[0136] wherein, in the (b) step, an analysis is performed on the received observed event data based on the knowledge data, and it is determined that the received observed event data is not needed if it is determined that the received observed event data can be derived from the analysis result and the other pieces of observed event data.
[0137] (Supplementary Note 7)
[0138] The observed event determination method according to supplementary note 5 or 6,
[0139] wherein, in the (b) step, backward inference is performed on the received observed event data, and it is determined that the received observed event data is not needed on a condition that, with respect to the obtained inference result, when the inference is traced back from the received observed event data, any of the other pieces of observed event data are necessarily reached.
[0140] (Supplementary Note 8)
[0141] The observed event determination method according to any of supplementary notes 5 to 7,
[0142] wherein, in the (b) step, it is determined, on a condition that the received observed event data and an event expected to be observed hold true at the same time, that the received observed event data is not needed if the event expected to be observed has not been observed, or if the event expected to be observed cannot be derived by backward inference from another observation based on the knowledge data.
[0143] (Supplementary Note 9)
[0144] A computer-readable recording medium that includes a program recorded thereon, the program including instructions that cause the computer to carry out:
[0145] (a) a step of receiving observed event data indicating an observed event; and
[0146] (b) a step of determining whether or not the received observed event data is not needed based on pieces of observed event data other than the received observed event data and knowledge data.
[0147] (Supplementary Note 10)
[0148] The computer-readable recording medium according to supplementary note 9,
[0149] wherein, in the (b) step, an analysis is performed on the received observed event data based on the knowledge data, and it is determined that the received observed event data is not needed if it is determined that the received observed event data can be derived from the analysis result and the other pieces of observed event data.
[0150] (Supplementary Note 11)
[0151] The computer-readable recording medium according to supplementary note 9 or 10,
[0152] wherein, in the (b) step, backward inference is performed on the received observed event data, and it is determined that the received observed event data is not needed on a condition that, with respect to the obtained inference result, when the inference is traced back from the received observed event data, any of the other pieces of observed event data are necessarily reached.
[0153] (Supplementary Note 12)
[0154] The computer-readable recording medium according to any of supplementary notes 9 to 11,
[0155] wherein, in the (b) step, it is determined, on a condition that the received observed event data and an event expected to be observed hold true at the same time, that the received observed event data is not needed if the event expected to be observed has not been observed, or if the event expected to be observed cannot be derived from another observation, under the situation in which new observed event data can be derived.
[0156] The invention of the present application has been described above with reference to the present example embodiment, but the invention of the present application is not limited to the above present example embodiment. The configurations and the details of the invention of the present application may be changed in various manners that can be understood by a person skilled in the art within the scope of the invention of the present application.
INDUSTRIAL APPLICABILITY
[0157] As described above, according to the invention, observed event data that is not needed in inference can be specified. The invention is useful in a system in which inference is performed.
LIST OF REFERENCE SIGNS
[0158] 10 Observed event determination apparatus [0159] 11 Data receiving unit [0160] 12 Data determining unit [0161] 110 Computer [0162] 111 CPU [0163] 112 Main memory [0164] 113 Storage device [0165] 114 Input interface [0166] 115 Display controller [0167] 116 Data reader/writer [0168] 117 Communication interface [0169] 118 Input devices [0170] 119 Display device [0171] 120 Recording medium [0172] 121 Bus