METHODS AND APPARATUSES FOR DETERMINING WHETHER AN ANOMALOUS EVENT OCCURRED LOCALLY AT A FIRST ENTITY

A method receives data from entities indicative of whether or not an anomalous event is occurring at the entities over a first time period. The method characterizes the system, based on the data and a system characterization model, as one of: a system in which only the first entity is experiencing an anomalous event at any one time; a system in which two or more of the plurality of entities are experiencing anomalous events occurring at any one time; and a system for which during at least one second time period within the first time period data is missing for one or more of the plurality of entities. The method uses one or more anomaly detection models to compare the data received from the first entity to the data received from other entities in the plurality of entities, and determine that a local anomalous event has occurred at an entity.