Method and apparatus for detecting anomalies in mission critical environments

1. A method for detecting anomalies in mission-critical environments, comprising:

parsing a received data set into a text structure, wherein the received data set comprises data regarding a network communication procedure between a plurality of user devices;

isolating a protocol language of the received data set, wherein the protocol language is a standardized pattern for implementing the network communication procedure;

generating a document from the received data set,

wherein the document includes a parsed text structure referencing a unique identifier, and

wherein generating further comprises: the at least one parsed text structure is organized within the at least one document according to a natural language scheme;

organizing, in light of the protocol language, the parsed text structure into a natural language scheme in the document;

detecting insights in the document;

extracting rules from the insights; and

detecting anomalies by applying the rules.

2. The method of claim 1 , wherein detecting insights in the document further comprises:

applying a natural language processing (NLP) technique to the document.

3. The method of claim 2 , wherein the natural language processing (NLP) technique includes at least statistical language modeling (SLM).

4. The method of claim 2 , wherein the natural language processing (NLP) technique includes at least word embedding.

5. The method of claim 1 , wherein the received data set includes application programming interface (API) communications.

6. The method of claim 5 ,

wherein the document comprises records and

wherein parsing the received data set further comprises:

parsing the records as any one of: sentences, words information elements, data units, and parsing procedures or sequences involving data packets or messages as paragraphs, wherein paragraphs contain sentences and sentences contain words.

7. The method of claim 1 , wherein isolating the protocol language of the received data set further comprises: identifying pre-defined messages, procedures, and sessions for a protocol.

8. The method of claim 1 , wherein generating the document further comprises:

identifying unique identifiers in the received data set; and

creating separate documents containing records relating to each identified unique identifier.

9. The method of claim 1 , wherein the at least one received set is for a mission critical environment and wherein detecting insights in the document is based on the protocol language.

10. A non-transitory computer readable medium having stored thereon instructions for causing a processing circuitry to execute a process for detecting anomalies in mission-critical environments, the storing program code which, when executed, performs a process comprising:

parsing a received data set into a text structure, wherein the received data set comprises data regarding a network communication procedure between a plurality of user devices;

isolating a protocol language of the received data set, wherein the protocol language is a standardized pattern for implementing the network communication procedure;

generating a document from the received data set, wherein the document includes at least one a parsed text structure referencing a unique identifier, and wherein generating further comprises:

organizing, in light of the protocol language, the parsed text structure into a natural language scheme in the document;

detecting insights in the document;

extracting rules from the insights; and

detecting anomalies by applying the rules.

11. A system for detecting anomalies in mission-critical environments, comprising:

a processing circuitry; and

a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:

parse a received data set into a text structure, wherein the received data set comprises data regarding a network communication procedure between a plurality of user devices;

isolate a protocol language of the received data set, wherein the protocol language is a standardized pattern for implementing the network communication procedure;

generate a document from the received data set, wherein the document includes a parsed text structure referencing a unique identifier, and wherein generating further comprises:

organizing, in light of the protocol language, the parsed text structure into a natural language scheme in the document;

detect insights in the document;

extract rules from the insights; and

detect anomalies by applying the rules.

12. The system of claim 11 , wherein the system is further configured to:

apply a natural language processing (NLP) technique to the document.

13. The system of claim 12 , wherein the natural language processing (NLP) technique includes at least statistical language modeling (SLM).

14. The system of claim 12 , wherein the natural language processing (NLP) technique includes at least word embedding.

15. The system of claim 11 , wherein the received data set includes application programming interface (API) communications.

16. The system of claim 15 ,

wherein the document comprises records, and

wherein the system is further configured to:

parse the records as any one of: sentences, words information elements, data units, and parsing procedures or sequences involving data packets or messages as paragraphs, wherein paragraphs contain sentences and sentences contain words.

17. The system of claim 11 , wherein the system is further configured to:

identify pre-defined messages, procedures, and sessions for a protocol.

18. The system of claim 11 , wherein the system is further configured to:

identify unique identifiers in the received data set and create separate documents containing records relating to each identified unique identifier.