How does it work
How does it work¶
Anomaly Detection has 2 phases: The training phase and the testing phase.
Training phase: In this time period, Anomaly Detection monitors the container behavior. It monitors the system, process, and network activity of the container and creates mathematical training vectors. When the training time is completed, it uses the training vectors to create a mathematical model for the container.
Testing phase: After completing the training phase, Anomaly Detection starts to evaluate the new data against the models.