首页>
外国专利>
BEHAVIORAL MODEL BASED ON SHORT AND LONG RANGE EVENT CORRELATIONS IN SYSTEM TRACES
BEHAVIORAL MODEL BASED ON SHORT AND LONG RANGE EVENT CORRELATIONS IN SYSTEM TRACES
展开▼
机译:系统跟踪中基于短事件和长事件相关性的行为模型
展开▼
页面导航
摘要
著录项
相似文献
摘要
A method of generating a behavioral model of a computer system. A processor partitions a system log of process events into a plurality of strands sharing common characteristics. The processor selects attributes from the strands and generates first distinct n-grams that include attributes from successive events within a strand. The processor generates a first plurality of n-gram groups, each including a plurality of the first distinct n-grams in which a first one of the plurality of first distinct n-grams coexists in a strand also containing a second one of the plurality of first distinct n-grams. The processor generates a first plurality of n-gram group arrangements, each containing a plurality of n-gram groups, and each of the n-gram groups included, in combination, in at least one strand, and the behavioral model containing the first distinct n-grams, the first plurality of n-gram groups, and the first plurality of n-gram group arrangements.
展开▼