Techniques for modeling and evaluating protocol interactions

摘要

Techniques for modeling and evaluating protocol interactions are provided. A service is monitored for its interactions with one or more protocols. The protocols are semantically defined and reference behaviors are derived therefrom in response to the interactions. The reference behaviors are then compared to runtime activities observed for the service with respect to the one or more protocols. If the activities deviate beyond a threshold, then the activities are flagged as suspect or deviant behaviors for the service.