Techniques to identify application foreground/background state based on network traffic are described. In one embodiment, an apparatus may comprise a traffic monitoring component and a traffic analysis component. The traffic monitoring component may receive monitored network traffic over a monitored time period. The traffic analysis component may receive a foreground activity profile, the foreground activity profile comprising one or more signals for distinguishing between foreground activity of one or more profiled applications and background activity of the one or more profiled applications; determine one or more active foreground applications in the monitored network traffic based on the foreground activity profile, wherein determining the one or more active foreground applications comprises determining that at least a portion of the monitored network traffic comprises background activity; and log that the one or more active foreground application were active during the monitored time period. Other embodiments are described and claimed.
展开▼
