Methods and apparatus to identify malicious activity in a network

摘要: Methods, apparatus, systems and articles of manufacture are disclosed to learn malicious activity. An example method includes assigning weights a distance function respective statistical features; iteratively calculating, with processor, the adjust (1) cause reduction in first calculated according for pair entities reference group associated activity (2) an increase second one included entity not group; determining whether feature is indicative based on adjusted weight determined after calculating number iterations.