公开(公告)号：US20220303297A1

公开(公告)日：2022-09-22

申请号：US17834598

申请日：2022-06-07

Applicant: NETAPP, INC.

Inventor： Omri Kessel ,  Shailaja Kamila ,  Pratyush Uppuluri ,  Jayanta Basak

IPC: H04L9/40

Abstract: A system, method, and machine-readable storage medium for detecting an anomaly are provided. In some embodiments, the method includes computing an access rate of a set of entities for each user of a plurality of users. The access rate may refer to data operations for the set of entities stored by a storage system. The method also includes normalizing the access rates for a subset of the plurality of users, the subset belonging to a community. The method further includes determining whether a normalized access rate from among the access rates satisfies a threshold. The method also includes detecting an anomaly in response to a determination that the normalized access rate satisfies the threshold.

公开(公告)号：US11363042B2

公开(公告)日：2022-06-14

申请号：US16297513

申请日：2019-03-08

Applicant: NETAPP, INC.

Inventor： Omri Kessel ,  Shailaja Kamila ,  Pratyush Uppuluri ,  Jayanta Basak

IPC: H04L9/40

Abstract: A system, method, and machine-readable storage medium for detecting an anomaly are provided. In some embodiments, the method includes computing an access rate of a set of entities for each user of a plurality of users. The access rate may refer to data operations for the set of entities stored by a storage system. The method also includes normalizing the access rates for a subset of the plurality of users, the subset belonging to a community. The method further includes determining whether a normalized access rate from among the access rates satisfies a threshold. The method also includes detecting an anomaly in response to a determination that the normalized access rate satisfies the threshold.

公开(公告)号：US20200233906A1

公开(公告)日：2020-07-23

申请号：US16297527

申请日：2019-03-08

Applicant: NETAPP, INC.

Inventor： Omri Kessel ,  Shailaja Kamila ,  Pratyush Uppuluri ,  Jayanta Basak

IPC: G06F16/906

Abstract: A system, method, and machine-readable storage medium for forming a community based on a common set of attributes are provided. In some embodiments, the method includes creating a list of entities associated with a plurality of users, each entity included in the list of entities being accessed by a user of the plurality of users. The method also includes identifying a first entity accessed by a group of users of the plurality of users. The method further includes determining a first set of entities accessed by each user of the group of users, the first set of entities being included in the list of entities. The method also includes removing the first entity and the first set of entities from the list of entities. The method further includes forming a first community including the group of users, the first entity, and the first set of entities.

公开(公告)号：US10389809B2

公开(公告)日：2019-08-20

申请号：US15056058

申请日：2016-02-29

Applicant: NETAPP, INC.

Inventor： Omri Kessel ,  Keren Dagan ,  Michael Edward Stapp ,  Aashay Yogesh Joshi ,  Daniel Nuriyev ,  John Jason Sprague

IPC: G06F9/00 ,  G06F17/30 ,  G06F9/46 ,  H04L29/08 ,  H04L29/06

Abstract: Methods and systems for a networked storage environment are provided. An application executed by a computing device using a plurality of resources in a networked storage environment for storing and retrieving application data is identified. Performance data of the plurality of resources is collected and historical performance data is retrieved. The collected and historical performance data for the plurality of resources is used to determine an overall anomaly score for the application indicating behavior of the application over time and individual anomaly scores for each resource with an indicator highlighting behavior of a resource that impacts the overall anomaly score for the application.