Detection experts understand that the optimal detection design and architecture is generally a combination of both signature and anomaly detection engines. In event processing, signature detection involves the real-time pattern matching analysis of events. A core advantage of signature detection is that basic pattern matching models are easy to understand and develop when you know exactly what pattern you are looking for. Designers then use a pattern, often called a signature, that searches for exact strings within an event object to detect, track, or observe an object of interest. Pattern matching can be executed very quickly, efficiently and inexpensively on... Read more →