Difference between revisions of "Question 3"
| (7 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| + | <!--MAIN HEADER --> | ||
| + | {|style="background-color:#1B338F;" width="100%" cellspacing="0" cellpadding="0" valign="top" border="0" | | ||
| + | | style="font-family:Century Gothic; font-size:100%; solid #000000; background:#2B3856; text-align:center;" width="20%" | | ||
| + | ; | ||
| + | [[ISSS608_2016-17_T1_Assign3_Liu_Jialin| <font color="#FFFFFF">Overview</font>]] | ||
| + | |||
| + | | style="font-family:Century Gothic; font-size:100%; solid #1B338F; background:#2B3856; text-align:center;" width="20%" | | ||
| + | ; | ||
| + | [[Data Preparation| <font color="#FFFFFF">Data Preparation</font>]] | ||
| + | |||
| + | | style="font-family:Century Gothic; font-size:100%; solid #1B338F; background:#2B3856; text-align:center;" width="20%" | | ||
| + | ; | ||
| + | [[Question 1| <font color="#FFFFFF">Question 1</font>]] | ||
| + | |||
| + | | style="font-family:Century Gothic; font-size:100%; solid #1B338F; background:#2B3856; text-align:center;" width="20%" | | ||
| + | ; | ||
| + | [[Question 2| <font color="#FFFFFF">Question 2</font>]] | ||
| + | |||
| + | | style="font-family:Century Gothic; font-size:100%; solid #1B338F; background:#2B3856; text-align:center;" width="20%" | | ||
| + | ; | ||
| + | [[Question 3| <font color="#FFFFFF">Question 3</font>]] | ||
| + | |||
| + | | | ||
| + | |} | ||
<b>From this data, can you hypothesize when the vandalism was discovered? Describe your rationale. Note: Please limit your response to no more than 3 images and 300 words.</b> | <b>From this data, can you hypothesize when the vandalism was discovered? Describe your rationale. Note: Please limit your response to no more than 3 images and 300 words.</b> | ||
Answer:<br> | Answer:<br> | ||
| + | <br> | ||
At first round of exploration, we check the distribution of messages sent to “external”. The timestamp of messages sent to external shows a sudden increase near noon on 8th Aug, 2014 and subsided afterwards. By decreasing the time increment to 0.1 hour, we can locate a more precise time interval during which the sudden spike occurred:<br> | At first round of exploration, we check the distribution of messages sent to “external”. The timestamp of messages sent to external shows a sudden increase near noon on 8th Aug, 2014 and subsided afterwards. By decreasing the time increment to 0.1 hour, we can locate a more precise time interval during which the sudden spike occurred:<br> | ||
| − | [[Image:LJL_Q3_1.png]] <br> | + | [[Image:LJL_Q3_1.png|650px]] <br> |
| − | Selecting the message at this period of time, in 18 minutes (11:42:01am to 11:59:59am) 5090 messages were sent to external devices. It is highly suspicious. Check the number of total messages sent around this hour (excluding messages sent by 1278894, the robot; time increment | + | <br> |
| − | [[Image:LJL_Q3_2.png]] <br> | + | <br> |
| + | Selecting the message at this period of time, in 18 minutes (11:42:01am to 11:59:59am) 5090 messages were sent to external devices. It is highly suspicious. Check the number of total messages sent around this hour (excluding messages sent by 1278894, the robot; time increment set to 0.1 hour):<br> | ||
| + | [[Image:LJL_Q3_2.png|650px]] <br> | ||
| + | <br> | ||
| + | <br> | ||
A similar spike is seen overall. Select the messages sent during these spike time and check distribution:<br> | A similar spike is seen overall. Select the messages sent during these spike time and check distribution:<br> | ||
| − | [[Image:LJL_Q3_3.png]] <br> | + | [[Image:LJL_Q3_3.png|650px]] <br> |
| + | <br> | ||
| + | <br> | ||
The messages were mostly sent between 12:00:00pm and 12:23:59pm. From the distributions, we can see that most of the messages were sent to 839736, which we have assumed to be a helpline in the theme park. Many messages were also sent to 1278894, probably by those visitors who do not know it is only a robot and could not reply. Majority of the messages were sent in Wet Land area, where the Creighton Pavilion is. The messages sent in Entry Corridor are most likely to be sent by 839736. The situation is likely to be that visitors realised the Creighton Pavilion was closed unexpectedly. They wanted to know why and they messaged the park IDs.<br> | The messages were mostly sent between 12:00:00pm and 12:23:59pm. From the distributions, we can see that most of the messages were sent to 839736, which we have assumed to be a helpline in the theme park. Many messages were also sent to 1278894, probably by those visitors who do not know it is only a robot and could not reply. Majority of the messages were sent in Wet Land area, where the Creighton Pavilion is. The messages sent in Entry Corridor are most likely to be sent by 839736. The situation is likely to be that visitors realised the Creighton Pavilion was closed unexpectedly. They wanted to know why and they messaged the park IDs.<br> | ||
| − | Furthermore, we noticed there is a lag between the surge in messages to external and internal messages. By zooming in the distribution, the exact time when external messages started to spike is 11:45:00am. So we can assume that the vandalism was discovered at 11:45:00am, and the Creighton Pavilion | + | <br> |
| + | Furthermore, we noticed there is a lag between the surge in messages to external and internal messages. By zooming in the distribution, <b>the exact time when external messages started to spike is 11:45:00am.</b> So we can assume that the vandalism was discovered at 11:45:00am, and <b>the Creighton Pavilion was closed around 12:00:00pm.</b> People at the scene were busy telling the whole world in between.<br> | ||
Latest revision as of 22:00, 28 October 2016
|
|
|
|
|
|
From this data, can you hypothesize when the vandalism was discovered? Describe your rationale. Note: Please limit your response to no more than 3 images and 300 words.
Answer:
At first round of exploration, we check the distribution of messages sent to “external”. The timestamp of messages sent to external shows a sudden increase near noon on 8th Aug, 2014 and subsided afterwards. By decreasing the time increment to 0.1 hour, we can locate a more precise time interval during which the sudden spike occurred:
Selecting the message at this period of time, in 18 minutes (11:42:01am to 11:59:59am) 5090 messages were sent to external devices. It is highly suspicious. Check the number of total messages sent around this hour (excluding messages sent by 1278894, the robot; time increment set to 0.1 hour):
A similar spike is seen overall. Select the messages sent during these spike time and check distribution:
The messages were mostly sent between 12:00:00pm and 12:23:59pm. From the distributions, we can see that most of the messages were sent to 839736, which we have assumed to be a helpline in the theme park. Many messages were also sent to 1278894, probably by those visitors who do not know it is only a robot and could not reply. Majority of the messages were sent in Wet Land area, where the Creighton Pavilion is. The messages sent in Entry Corridor are most likely to be sent by 839736. The situation is likely to be that visitors realised the Creighton Pavilion was closed unexpectedly. They wanted to know why and they messaged the park IDs.
Furthermore, we noticed there is a lag between the surge in messages to external and internal messages. By zooming in the distribution, the exact time when external messages started to spike is 11:45:00am. So we can assume that the vandalism was discovered at 11:45:00am, and the Creighton Pavilion was closed around 12:00:00pm. People at the scene were busy telling the whole world in between.
