Dynamic activity model of network services
First Claim
1. A method for constructing and maintaining an activity model, comprising:
- capturing a first window of input and output data into a computer, the first window of input and output data corresponding to a plurality of input channels and a plurality of output channels on the computer;
analyzing by one or more computer processors the collected first window of input and output data to identify statistical relationships among the data, wherein the relationships comprise a determination that receiving a packet at a first input channel of the plurality of input channels on the computer causes a packet to be transmitted from a first output channel of the plurality of output channels on the computer; and
generating by the one or more computer processors an activity model from the identified statistical relationships among the first window of data.
3 Assignments
0 Petitions
Accused Products
Abstract
An activity model is generated at a computer. The activity model may be generated by monitoring incoming and outgoing data in the computer. The collected data is analyzed to form a graph that describes and predicts what output is generated in response to received input. Later, a window of input and output data is collected from the computer. This collected window of data is used to query the activity model. The graph in the activity model is then used to give the probability that the collected window of data was collected from the computer used to generate the activity model. A high probability indicates that the computer is performing normally, while a low probability indicates that the computer may behaving erratically and there may be a problem with the computer.
-
Citations
20 Claims
-
1. A method for constructing and maintaining an activity model, comprising:
-
capturing a first window of input and output data into a computer, the first window of input and output data corresponding to a plurality of input channels and a plurality of output channels on the computer; analyzing by one or more computer processors the collected first window of input and output data to identify statistical relationships among the data, wherein the relationships comprise a determination that receiving a packet at a first input channel of the plurality of input channels on the computer causes a packet to be transmitted from a first output channel of the plurality of output channels on the computer; and generating by the one or more computer processors an activity model from the identified statistical relationships among the first window of data. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. A computer-readable storage medium, where the computer-readable storage medium is not a signal, containing computer-executable instructions for performing the method of:
-
selecting a first window of input and output data, the first window of input and output data corresponding to a plurality of input channels and a plurality of output channels on the computer; analyzing the collected first window of input and output data to identify statistical relationships among the data, wherein the relationships comprise a determination that receiving a packet at a first input channel of the plurality of input channels on the computer causes a packet to be transmitted from a first output channel of the plurality of output channels on the computer; and generating an activity model from the identified statistical relationships among the first window of data. - View Dependent Claims (13, 14, 15, 16, 17, 18, 19)
-
-
20. A method for constructing an activity model, comprising:
-
capturing a first window of input and output packets into a computer; analyzing by one or more computer processors the arrival time and the source and destination addresses of the packets to identify statistical relationships among the packets; and generating by the one or more computer processors an activity model from the identified statistical relationships among the packets.
-
Specification