Apparatus, system, and method for associating resources using a behavior based algorithm
First Claim
1. An apparatus to associate resources using a behavior based algorithm, the apparatus comprising:
- an initialization module configured to receive a seed identifier corresponding to a seed resource, the seed resource comprising one of a plurality of system resources;
a query module configured to search trace data for a candidate resource, the trace data descriptive of a plurality of resource events among the plurality of system resources; and
a resource behavior module configured to select the candidate resource based on a common resource event involving the seed resource and the candidate resource.
1 Assignment
0 Petitions
Accused Products
Abstract
An apparatus, system, and method are provided for associating resources using a behavior based algorithm. The apparatus comprises an initialization module, a query module, and a resource behavior module. The initialization module receives a seed identifier that identifies a seed resource. The seed resource may be a data file, an executable, file, a directory, or another data structure associated with a logical application or business process. The query module accesses trace data and searches the trace data for a candidate resource that might be linked to the seed resource. The trace data describes a plurality of resource events that occur on a computer or network system. The resource behavior module is configured to select a candidate resource based on a common resource event recorded in the trace data. The common resource event is an operation that involves both the seed resource and the candidate resource. Based on the common resource event, the candidate resource may be associated or linked with the seed resource. Together the seed resource and one or more linked resources may form a resource group, which may be associated with a particular logical application or business process.
73 Citations
31 Claims
-
1. An apparatus to associate resources using a behavior based algorithm, the apparatus comprising:
-
an initialization module configured to receive a seed identifier corresponding to a seed resource, the seed resource comprising one of a plurality of system resources;
a query module configured to search trace data for a candidate resource, the trace data descriptive of a plurality of resource events among the plurality of system resources; and
a resource behavior module configured to select the candidate resource based on a common resource event involving the seed resource and the candidate resource. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13)
-
-
14. A system to associate resources using a behavior based algorithm, the system comprising:
-
a monitor module configured to monitor a plurality of resource events among a plurality of system resources;
a storage device configured to store trace data, the trace data descriptive of the plurality of resource events;
an initialization module configured to receive a seed identifier from a user, the seed identifier corresponding to a seed resource, the seed resource comprising one of the plurality of system resources;
a query module configured to search the trace data for a candidate resource; and
a resource behavior module configured to select the candidate resource based on a common resource event involving the seed resource and the candidate resource. - View Dependent Claims (15, 16, 17, 18)
-
-
19. A signal bearing medium tangibly embodying a program of machine-readable instructions executable by a digital processing apparatus to perform operations to associate resources using a behavior based algorithm, the operations comprising:
-
receiving a seed identifier corresponding to a seed resource, the seed resource comprising one of a plurality of system resources;
searching trace data for a candidate resource, the trace data descriptive of a plurality of resource events among the plurality of system resources; and
selecting the candidate resource based on a common resource event involving the seed resource and the candidate resource. - View Dependent Claims (20, 21, 22, 23, 24, 25, 26, 27, 28, 29)
-
-
30. A method for associating resources using ownership based algorithms, the method comprising:
-
receiving a seed identifier corresponding to a seed resource, the seed resource comprising one of a plurality of system resources;
searching trace data for a candidate resource, the trace data descriptive of a plurality of resource events among the plurality of system resources; and
selecting the candidate resource based on a common resource event involving the seed resource and the candidate resource.
-
-
31. An apparatus to associate resources using ownership based algorithms, the apparatus comprising:
-
means for receiving a seed identifier corresponding to a seed resource, the seed resource comprising one of a plurality of system resources;
means for searching trace data for a candidate resource, the trace data descriptive of a plurality of resource events among the plurality of system resources; and
means for selecting the candidate resource based on a common resource event involving the seed resource and the candidate resource.
-
Specification