首页>
外国专利>
Behavioral model based on short and long range event correlations in system traces
Behavioral model based on short and long range event correlations in system traces
展开▼
机译:基于系统跟踪中短期和长期事件相关性的行为模型
展开▼
页面导航
摘要
著录项
相似文献
摘要
A method of generating a behavioral model of a computer system. A processor partitions a system log of process events into a plurality of strands sharing common characteristics. The processor selects attributes from the strands and generates first distinct n-grams that include attributes from successive events within a strand. The processor generates a first plurality of n-gram groups, each including a plurality of the first distinct n-grams in which a first one of the plurality of first distinct n-grams coexists in a strand also containing a second one of the plurality of first distinct n-grams. The processor generates a first plurality of n-gram group arrangements, each containing a plurality of n-gram groups, and each of the n-gram groups included, in combination, in at least one strand, and the behavioral model containing the first distinct n-grams, the first plurality of n-gram groups, and the first plurality of n-gram group arrangements.
展开▼