UNUSUAL SCORE GENERATORS FOR A NEURO-LINGUISTIC BEHAVIORAL RECOGNITION SYSTEM

1 . A method for generating anomaly scores for a neuro-linguistic model of input data obtained from one or more sources, comprising:

receiving a stream of symbols generated from an ordered stream of normalized vectors generated from input data received from one or more sensor devices during a first time period;

generating a set of words based on an occurrence of groups of symbols from the stream of symbols;

determining a number of previous occurrences of a first word of the set of words;

determining a number of previous occurrences of words of a same length as the first word; and

determining a first anomaly score based on the number of previous occurrences of the first word and the number of previous occurrences of words of the same length as the first word.

2 . The method of claim 1 , further comprising:

determining anomaly scores for each word of the set of words;

determining a maximum anomaly score based on a maximum of the first anomaly score and the anomaly scores; and

outputting the maximum anomaly score.

3 . The method of claim 2 , further comprising:

outputting an alert directive based on the maximum anomaly score.

4 . The method of claim 1 , further comprising:

generating a syntax comprising at least one of the one or more word combinations and describing the relationship between the words of the syntax;

determining the distance between the generated syntax and a syntax model, wherein the syntax and syntax model comprise a connected graph, wherein each node in the connected graph represents one of the words in the stream, and wherein edges connecting the nodes represent a probabilistic relationship between words in the stream; and

outputting a third anomaly score based on the determined distance.

5 . The method of claim 4 , wherein determining the distance comprises:

determining a set of most significant words of the generated syntax based on probabilistic relationships and

comparing each word of the set of most significant words to the words in the syntax model in to determine a distance between each word of the set of most significant words and words in the syntax model.

6 . The method of claim 5 , wherein the comparing comprises:

determining a feature weight for features for each word of the set of most significant words and comparing the features and feature weight of each word to the words in the syntax model, wherein the feature weight is based on a summation and maximum of feature scores.

7 . The method of claim 4 , wherein the distance between the generated syntax and a syntax model is weighted based on the length of words in the generated syntax.

8 . A computer-readable storage medium storing instructions, which, when executed on a processor, perform an operation for generating anomaly scores for a neuro-linguistic model of input data obtained from one or more sources, comprising:

receiving a stream of symbols generated from an ordered stream of normalized vectors generated from input data received from one or more sensor devices during a first time period;

generating a set of words based on an occurrence of groups of symbols from the stream of symbols;

determining a number of previous occurrences of a first word of the set of words;

determining a number of previous occurrences of words of a same length as the first word; and

determining a first anomaly score based on the number of previous occurrences of the first word and the number of previous occurrences of words of the same length as the first word.

9 . The computer-readable storage medium of claim 8 , further comprising:

determining anomaly scores for each word of the set of words;

determining a maximum anomaly score based on a maximum of the first anomaly score and the anomaly scores; and

outputting the maximum anomaly score.

10 . The computer-readable storage medium of claim 9 , further comprising:

outputting an alert directive based on the maximum anomaly score.

11 . The computer-readable storage medium of claim 8 , further comprising:

generating a syntax comprising at least one of the one or more word combinations and describing the relationship between the words of the syntax;

determining the distance between the generated syntax and a syntax model, wherein the syntax and syntax model comprise a connected graph, wherein each node in the connected graph represents one of the words in the stream, and wherein edges connecting the nodes represent a probabilistic relationship between words in the stream; and

outputting a third anomaly score based on the determined distance.

12 . The computer-readable storage medium of claim 11 , wherein determining the distance comprises:

determining a set of most significant words of the generated syntax based on probabilistic relationships and

comparing each word of the set of most significant words to the words in the syntax model in to determine a distance between each word of the set of most significant words and words in the syntax model.

13 . The computer-readable storage medium of claim 12 , wherein the comparing comprises:

determining a feature weight for features for each word of the set of most significant words and comparing the features and feature weight of each word to the words in the syntax model, wherein the feature weight is based on a summation and maximum of feature scores.

14 . The computer-readable storage medium of claim 11 , wherein the distance between the generated syntax and a syntax model is weighted based on the length of words in the generated syntax.

15 . A system, comprising:

a processor; and

memory storing code, which, when executed on a processor, perform an operation for generating anomaly scores for a neuro-linguistic model of input data obtained from one or more sources, comprising:

receiving a stream of symbols generated from an ordered stream of normalized vectors generated from input data received from one or more sensor devices during a first time period;

generating a set of words based on an occurrence of groups of symbols from the stream of symbols;

determining a number of previous occurrences of a first word of the set of words;

determining a number of previous occurrences of words of a same length as the first word; and

determining a first anomaly score based on the number of previous occurrences of the first word and the number of previous occurrences of words of the same length as the first word.

16 . The system of claim 15 , further comprising:

determining anomaly scores for each word of the set of words;

determining a maximum anomaly score based on a maximum of the first anomaly score and the anomaly scores; and

outputting the maximum anomaly score.

17 . The system of claim 16 , further comprising:

outputting an alert directive based on the maximum anomaly score.

18 . The system of claim 15 , further comprising:

generating a syntax comprising at least one of the one or more word combinations and describing the relationship between the words of the syntax;

determining the distance between the generated syntax and a syntax model, wherein the syntax and syntax model comprise a connected graph, wherein each node in the connected graph represents one of the words in the stream, and wherein edges connecting the nodes represent a probabilistic relationship between words in the stream; and

outputting a third anomaly score based on the determined distance.

19 . The system of claim 18 , wherein determining the distance comprises:

determining a set of most significant words of the generated syntax based on probabilistic relationships and

comparing each word of the set of most significant words to the words in the syntax model in to determine a distance between each word of the set of most significant words and words in the syntax model.

20 . The system of claim 19 , wherein the comparing comprises:

determining a feature weight for features for each word of the set of most significant words and comparing the features and feature weight of each word to the words in the syntax model, wherein the feature weight is based on a summation and maximum of feature scores.