Suppose we are monitoring computers in a data center. Some of the features collected on the computer are memory use, number of disk accesses, cpu load, and network traffic.

The goal is to figure out if any of the computers are behaving abnormally given historical data of their behavior.

a) Discuss how you would design a solution to solve this problem. Give all the steps of your algorithm. State your assumptions.

b) How would you decide if a computer is behaving abnormally?

c) Can you think of any conditions under which your algorithm may produce a lot of false positives or false negatives?