公开(公告)号：US11190421B1

公开(公告)日：2021-11-30

申请号：US17188299

申请日：2021-03-01

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION

Inventor： Pei Ni Liu ,  Zi Xiao Zhu ,  Tian Wu ,  Jia Qi Li ,  Fan Jing Meng ,  Ruo Yi Liu

IPC: G06F15/173 ,  H04L12/26 ,  H04L12/24 ,  H04L12/801

Abstract: Embodiments of the present disclosure relate to a method for processing alerts. According to an embodiment of the present disclosure, a set of alerts matching a metric template are identified from received alerts during a period of time. A plurality of variable values are acquired from the set of alerts based on the metric template. The plurality of variable values are normalized according to a normalization rule of the metric template. A severity level for the set of alerts is determined based on the normalized variable values. In response to the severity level exceeding a certain threshold, an abstract alert including information related to the set of alerts is generated.

公开(公告)号：US20210286826A1

公开(公告)日：2021-09-16

申请号：US16819138

申请日：2020-03-15

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION

Inventor： Jia Qi Li ,  Fan Jing Meng ,  Jing Min Xu ,  Zi Xiao Zhu

IPC: G06F16/28 ,  G06Q10/10 ,  G06F17/18

Abstract: A system and method for attribute discovery for operation objects from operation data includes segmenting a name of each of a plurality of operation objects based on one or more special characters used in the name of each operation object. A similarity comparison of the operation objects is performed by extracting common subsequences from substrings in operation data in a same log as a target object, and a string similarity is computed of the extracted common subsequences. Numerical attributes are determined by calculating statistical metrics for fields in the log, and additional information of the operation objects is discovered based on the determined numerical attributes.

公开(公告)号：US11055403B2

公开(公告)日：2021-07-06

申请号：US15400383

申请日：2017-01-06

Applicant: International Business Machines Corporation

Inventor： Peng Fei Chen ,  Fan Jing Meng ,  Jing Min Xu ,  Lin Yang ,  Xiao Zhang

IPC: G06F21/55 ,  G06F21/53 ,  G06F9/455 ,  G06F16/14 ,  G06F8/41 ,  G06F21/64

Abstract: A method, system, and computer program product, include extracting information related to one or more processes of one or more applications running on a virtual machine from a memory of the virtual machine, building at least one first application signature based on the extracted information, and identifying the one or more applications running on the virtual machine by matching the at least one first application signature with one or more second application signatures previously stored.

公开(公告)号：US20210117259A1

公开(公告)日：2021-04-22

申请号：US17132690

申请日：2020-12-23

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION

Inventor： Jia Wei Yang ,  Fan Jing Meng

IPC: G06F11/07 ,  G06N5/02 ,  G06F16/28

Abstract: A computer-implemented method is presented for detecting anomalies in dynamic datasets generated in a cloud computing environment. The method includes monitoring a plurality of cloud servers receiving a plurality of data points, employing a two-level clustering training module to generate micro-clusters from the plurality of data points, each of the micro-clusters representing a set of original data from the plurality of data points, employing a detecting module to detect normal data points, abnormal data points, and unknown data points from the plurality of data points via a detection model, employing an evolving module using a different evolving mechanism for each of the normal, abnormal, and unknown data points to evolve the detection model, and generating a system report displayed on a user interface, the system report summarizing the micro-cluster information.

公开(公告)号：US10977112B2

公开(公告)日：2021-04-13

申请号：US16253262

申请日：2019-01-22

Applicant: International Business Machines Corporation

Inventor： Xiao Zhang ,  Fan Jing Meng ,  Lin Yang ,  Jing Min Xu

IPC: G06F11/00 ,  G06F11/07

Abstract: Embodiments facilitating performance anomaly detection are described. A computer-implemented method comprises: detecting, by a device operatively coupled to one or more processing units, based on monitoring data of a plurality of performance metrics of a monitored device, at least one trend within the monitoring data of the respective performance metrics; removing, by the device, the at least one trend from the monitoring data of the respective performance metrics to generate modified data of the respective performance metrics; and detecting, by the device, a performance anomaly based on the modified data of the respective performance metrics and a behavior clustering model comprising at least one steady state.

公开(公告)号：US10949283B2

公开(公告)日：2021-03-16

申请号：US16181810

申请日：2018-11-06

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION

Inventor： Jia Wei Yang ,  Fan Jing Meng

IPC: G06F11/00 ,  G06F11/07 ,  G06N5/02 ,  G06F16/28

Abstract: A computer-implemented method is presented for detecting anomalies in dynamic datasets generated in a cloud computing environment. The method includes monitoring a plurality of cloud servers receiving a plurality of data points, employing a two-level clustering training module to generate micro-clusters from the plurality of data points, each of the micro-clusters representing a set of original data from the plurality of data points, employing a detecting module to detect normal data points, abnormal data points, and unknown data points from the plurality of data points via a detection model, employing an evolving module using a different evolving mechanism for each of the normal, abnormal, and unknown data points to evolve the detection model, and generating a system report displayed on a user interface, the system report summarizing the micro-cluster information.

公开(公告)号：US10303539B2

公开(公告)日：2019-05-28

申请号：US15049855

申请日：2016-02-22

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION

Inventor： Fan Jing Meng ,  Vadakkedathu T. Rajan ,  Mark N. Wegman ,  Jing Min Xu ,  Lin Y. Yang

IPC: G06F11/34 ,  G06F11/07 ,  G06F21/55 ,  G06F11/30

Abstract: A method for automatically detecting and diagnosing problems in computer system functioning includes determining changed objects from computer system monitoring data, calculating temporal correlations from errors and changes sequences for each changed object, identifying and ranking suspicious computer system behavior patterns from the temporal correlations, and outputting said ranked suspicious computer system behavior patterns.

公开(公告)号：US10102027B2

公开(公告)日：2018-10-16

申请号：US15456762

申请日：2017-03-13

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION

Inventor： Fan Jing Meng ,  Yuan Wang ,  Jing Min Xu ,  Bo Yang ,  Yang Zhao

IPC: G06F9/455 ,  H04L12/24 ,  H04L29/08 ,  G06F9/48

Abstract: Embodiments include methods and devices for migrating virtual assets over networks that have a first manager connected to a physical host a virtual machine run. Aspects include registering the physical host to a second manager in the network, creating the mapping relationship of the physical host between a database of the first manager and a database of the second manager and importing instance data and status data of the virtual machine of the physical host from the database of the first manager into the database of the second manager. Aspects also include switching the management for the physical host from the first manager to the second manager.

公开(公告)号：US10102026B2

公开(公告)日：2018-10-16

申请号：US15455258

申请日：2017-03-10

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION

Inventor： Fan Jing Meng ,  Yuan Wang ,  Jing Min Xu ,  Bo Yang ,  Yang Zhao

IPC: G06F9/455 ,  H04L12/24 ,  H04L29/08 ,  G06F9/48

Abstract: Embodiments include methods and devices for migrating virtual assets over networks that have a first manager connected to a physical host a virtual machine run. Aspects include registering the physical host to a second manager in the network, creating the mapping relationship of the physical host between a database of the first manager and a database of the second manager and importing instance data and status data of the virtual machine of the physical host from the database of the first manager into the database of the second manager. Aspects also include switching the management for the physical host from the first manager to the second manager.

公开(公告)号：US10078667B2

公开(公告)日：2018-09-18

申请号：US14967314

申请日：2015-12-13

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION

Inventor： Chang Sheng Li ,  Fan Jing Meng ,  Edith Helen Stern ,  Han Wang ,  Jing Min Xu ,  Lin Yang ,  Xuejun Zhuo

IPC: G06F17/30 ,  H04L12/24

CPC classification number: G06F16/2455 ,  G06F17/3053 ,  G06F17/30554 ,  H04L41/0806

Abstract: Embodiments include method, computer program products and apparatuses for normalizing non-numeric features of files and corresponding apparatus. Aspects include segmenting at least one pair of positive instances of a non-numeric feature of a file into a number of tokens and -comparing the tokens in the at least one pair of positive instances to obtain matching tokens. Aspects also include calculating weights of their matching the file, for the matching tokens, and storing the tokens and their weights in a token base.