DYNAMIC ACTIVITY MODEL OF NETWORK SERVICES
First Claim
1. A method for constructing and maintaining an activity model, comprising:
- capturing a first window of input and output data into a computer;
analyzing the collected first window of input and output data to identify statistical relationships among the data; and
generating an activity model from the identified statistical relationships among the first window of data.
3 Assignments
0 Petitions
Accused Products
Abstract
An activity model is generated at a computer. The activity model may be generated by monitoring incoming and outgoing data in the computer. The collected data is analyzed to form a graph that describes and predicts what output is generated in response to received input. Later, a window of input and output data is collected from the computer. This collected window of data is used to query the activity model. The graph in the activity model is then used to give the probability that the collected window of data was collected from the computer used to generate the activity model. A high probability indicates that the computer is performing normally, while a low probability indicates that the computer may behaving erratically and there may be a problem with the computer.
-
Citations
20 Claims
-
1. A method for constructing and maintaining an activity model, comprising:
-
capturing a first window of input and output data into a computer; analyzing the collected first window of input and output data to identify statistical relationships among the data; and generating an activity model from the identified statistical relationships among the first window of data. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. A computer-readable medium containing computer-executable instructions for performing the method of:
-
selecting a first window of input and output data; analyzing the collected first window of input and output data to identify statistical relationships among the data; and generating an activity model from the identified statistical relationships among the first window of data. - View Dependent Claims (13, 14, 15, 16, 17, 18, 19)
-
-
20. A method for constructing an activity model, comprising:
-
capturing a first window of input and output packets into a computer; analyzing the arrival time and the source and destination addresses of the packets to identify statistical relationships among the packets; and generating an activity model from the identified statistical relationships among the packets.
-
Specification