DETERMINING ANOMALOUS EVENTS IN A SYSTEM USING A BLOOM FILTER

Some embodiments relate to computer-implemented method for determining an anomalous event in a system. The invention includes defining a Bloom filter representing predefined signature strings each indicative of an anomalous event in the system. The invention includes receiving sensor data from, sensors of the system, indicative of operational parameters associated with the system. The invention includes determining, based on the sensor data, a current signature string indicative of current operation of the system, and comparing the current signature string to the predefined signature strings to determine whether there is an anomalous event in the system, where performing the comparison includes applying the Bloom filter to the current signature string.