Thanks @Doonhammer for your interest in working with Monty in this setting, it definitely sounds interesting.
It’s worth noting that Monty needs to perform some kind of movement (such as through abstract spaces) to benefit from its unique attributes, given that it is at its core a sensorimotor system. On the other hand, while older Numenta algorithms like HTM can be used for time-series data, supporting such data is actually a work in progress for Monty. If you look at our current datasets, you will therefore see that they consist of static objects, but the Monty system is constantly moving. We’re hoping to support Monty learning dynamic, time-varying objects soon, but it’s on the 6-12 month timescale at the earliest.
I think it would be helpful if you could walk through how you see the Thousand Brains Theory mapping onto the problem you are dealing with. Reference frames can be used for encoding abstract and concrete network spaces (interconnected nodes, their geolocation, etc.), but without any movement through a space of some kind, I’m struggling to see how Monty will bring a major benefit to your problem setup. For example, Monty could be setup to attend to different sensors at a given point in time, if focusing computational resources would provide benefits from a network-security point of view. This would be similar to the non-physical movement that occurs in our visual field when we attend to a region without moving our eyes.
Alternatively you could imagine how a security engineer might (although I know very little about this) navigate through a series of directories if they are concerned that some malicious activity has taken place. Perhaps examining every binary file for evidence of tampering by a 3rd party is infeasible within a given period of time, and so requires a principled, hypothesis-driven search based on a learned model of the network and its contents. This is definitely not my area of expertise, but hopefully this gives some sense of what I mean by movement.
Once I better understand any mapping between the Thousand Brains Theory and your problem setup, I can suggest how Monty might be best applied if appropriate.