Method and system for finding evolving regions in graphs without persistent node identity
First Claim
1. A method for identifying at least one evolving region in a graph of interrelated nodes representing an evolving computer system environment, the method using an information processing system comprising:
- generating a series of samples of an evolving computer system environment, each sample in the series of samples including a plurality of interrelated nodes and at least one edge classified into a plurality of at least one of a node type and an edge type, respectively;
creating a summary of the plurality of interrelated nodes and at least one edge in the series of samples, the summary summarizing at least one of all node types and all edge types in the series of samples;
creating an instance of the summary for each sample by summarizing at least one of all of the node types and the edge types for each sample in the series;
storing at least one instance of the created instances of the summary;
comparing at least one instance of the summary to at least one subsequent instance of the summary;
storing at least one result from comparing the instances of the summary; and
associating at least one sample of the evolving computer system environment with the at least one stored comparison result to characterize a successive behavior of the evolving computer system environment for one or more of the at least one of the node type and the edge type.
3 Assignments
0 Petitions
Accused Products
Abstract
A system, method, and computer program for identifying evolving regions in a graph of interrelated nodes representing a computer system environment. The method includes generating a series of samples (302) of the environment. Each sample includes a plurality of interrelated nodes (502) and at least one edge (504) classified into a plurality of at least one of node type and edge type, respectively. A summary (900) of the plurality of at least one of node type (502) and edge type (504) is created for the series of samples (302). A summary instance (312) of the summary (900) is created for each sample. At least one summary instance (312) is compared to at least one subsequent summary instance (314) and at least one result (318) is stored in memory (106). A successive behavior is characterized for one or more of the at least one of the node type and the edge type.
30 Citations
20 Claims
-
1. A method for identifying at least one evolving region in a graph of interrelated nodes representing an evolving computer system environment, the method using an information processing system comprising:
-
generating a series of samples of an evolving computer system environment, each sample in the series of samples including a plurality of interrelated nodes and at least one edge classified into a plurality of at least one of a node type and an edge type, respectively;
creating a summary of the plurality of interrelated nodes and at least one edge in the series of samples, the summary summarizing at least one of all node types and all edge types in the series of samples;
creating an instance of the summary for each sample by summarizing at least one of all of the node types and the edge types for each sample in the series;
storing at least one instance of the created instances of the summary;
comparing at least one instance of the summary to at least one subsequent instance of the summary;
storing at least one result from comparing the instances of the summary; and
associating at least one sample of the evolving computer system environment with the at least one stored comparison result to characterize a successive behavior of the evolving computer system environment for one or more of the at least one of the node type and the edge type. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
-
10. An information processing system used for estimating how regions in a graph of interrelated nodes representing an evolving computer system environment are evolving, the information system comprising:
-
a memory;
an information processing unit communicatively coupled to the memory;
an environment analyzing tool communicatively coupled to the memory and the information processing unit, the environment analyzing tool comprising;
a sample generator for generating a series of samples of an evolving computer system environment, wherein at least one sample in the series is stored in the memory;
a node classifier for classifying a plurality of interrelated nodes in each of the samples into a plurality of at least one of a node type and an edge type;
a summarizer for creating a summary of the plurality of interrelated nodes and at least one edge for the series of samples, wherein the summary is stored in the memory;
a comparator for comparing at least one instance of the summary to at least one subsequent instance of the summary; and
a pattern generator for determining at least one pattern of evolution of at least one region in the evolving computer system environment based on at least the summary of the plurality of interrelated nodes and the at least one edge for the series of samples. - View Dependent Claims (11, 12, 13, 14)
-
-
15. A computer readable medium including computer instructions for identifying at least one evolving region in a graph of interrelated nodes representing an evolving computer system environment, the computer readable medium comprising computer instructions for:
-
generating a series of samples of an evolving computer system environment, each sample in the series of samples including a plurality of interrelated nodes and at least one edge classified into a plurality of at least one of a node type and an edge type, respectively;
creating a summary of the plurality of interrelated nodes and at least one edge in the series of samples, the summary summarizing at least one of all node types and all edge types in the series of samples;
creating an instance of the summary for each sample by summarizing at least one of all of the node types and the edge types for each sample in the series;
storing at least one instance of the created instances of the summary;
comparing at least one instance of the summary to at least one subsequent instance of the summary;
storing at least one result from comparing the instances of the summary; and
associating at least one sample of the evolving computer system environment with the stored comparison results to characterize a successive behavior of the evolving computer system environment for one or more of the at least one of the node type and the edge type. - View Dependent Claims (16, 17, 18, 19, 20)
-
Specification