Dynamic Applicative Session Grouping
    2.
    发明公开

    公开(公告)号:US20240028494A1

    公开(公告)日:2024-01-25

    申请号:US17869328

    申请日:2022-07-20

    申请人: Zscaler, Inc.

    IPC分类号: G06F11/30 G06N20/00

    摘要: Systems and methods for dynamic applicative session separation and grouping. The system receives logs from one of a plurality of machines. The system can receive and manage logs from any number of machines in the cloud-based system. The system resamples the received logs by a given time frame. The system determines time intervals between activities based on the resampling of the logs. After determining the time intervals, the system determines a probability of a new log to be received after a time interval. The system then defines a session separation breaker and defines one or more logs as opening or closing a session.

    IDENTIFICATION OF SIMILAR INCIDENTS BASED ON SIMILARITY SCORES

    公开(公告)号:US20230376399A1

    公开(公告)日:2023-11-23

    申请号:US17748784

    申请日:2022-05-19

    IPC分类号: G06F11/30 G06K9/62 G06F9/54

    摘要: According to examples, an apparatus may include a processor and a memory on which are stored machine-readable instructions that, when executed by the processor, may cause the processor to receive event data for a subject incident. The processor may filter a set of candidate incidents to identify a first predefined number of candidate incidents. The first predefined number of candidate incidents may be filtered based on a respective first similarity score assigned to each of the candidate incidents. The processor may assign a respective second similarity score to each of the identified first predefined number of candidate incidents. The second similarity score may be based on common property values between the subject incident and respective candidate incidents. The processor may identify and output a second predefined number of candidate incidents among the first predefined number of candidate incidents based on the assigned second similarity score.

    MESSAGE ANALYSIS APPARATUS, MESSAGE ANALYSIS METHOD, AND STORAGE MEDIUM

    公开(公告)号:US20180165174A1

    公开(公告)日:2018-06-14

    申请号:US15577839

    申请日:2016-06-10

    IPC分类号: G06F11/34 G06K9/62 G06Q50/00

    摘要: The present invention can provide a technology for presenting information that indicates contents and trends of many messages without a need to define a portion that varies among the messages in advance. A message analysis apparatus is provided with a clustering unit, a field analysis unit, and a pattern generation unit. The clustering unit classifies a message set that is an aggregation of messages each being formed of one or more fields, into a cluster, based on similarity among the messages. The field analysis unit identifies, in each of fields that form a message group in the cluster, a variable portion in which a value in the field varies and an invariable portion in which a value in the field does not vary. The pattern generation unit generates a message pattern being common to the message group in the cluster, based on the variable portion and the invariable portion.

    POST-SILICON VALIDATION AND DEBUG USING SYMBOLIC QUICK ERROR DETECTION

    公开(公告)号:US20180157574A1

    公开(公告)日:2018-06-07

    申请号:US15577065

    申请日:2016-06-06

    IPC分类号: G06F11/34 G06F11/22 G06F11/30

    摘要: Disclosed are improved methods and structures for verifying integrated circuits and in particular systems-on-a-chip constructed therefrom. We call methods and structures according to the present disclosure Symbolic Quick Error Detection or Symbolic QED, Illustrative characteristics of Symbolic QED include: 1) It is applicable to any System-on-Chip (SoC) design as long as it contains at least one programmable processor; 2) It is broadly applicable for logic bugs inside processor cores, accelerators, and uncore components; 3) It does not require failure reproduction; 4) It does not require human intervention during bug localization; 5) It does not require trace buffers, 6) It does not require assertions; and 7) It uses hardware structures called “change detectors” which introduce only a small area overhead. Symbolic QED exhibits: 1) A systematic (and automated) approach to inserting “change detectors” during a design phase; 2) Quick Error Detection (QED) tests that detect bugs with short error detection latencies and high coverage; and 3) Formal techniques that enable bug localization and generation of minimal bug traces upon bug detection.

    Data quality
    6.
    发明授权

    公开(公告)号:US09734035B1

    公开(公告)日:2017-08-15

    申请号:US14268900

    申请日:2014-05-02

    IPC分类号: G06F11/00 G06F11/34

    摘要: Functionality is disclosed herein for increasing input data quality across data targets. The mechanism disclosed herein may receive input data, aggregate and organize the input data, and determine an importance score for the organized data. The importance score may abstract both a quantitative measure and periodic measure for creating a sliding scale. The sliding scale may subsequently be used to associate desired alert information concerning data quality events at the data targets.

    Distributed maintenance mode control
    8.
    发明授权
    Distributed maintenance mode control 有权
    分布式维护模式控制

    公开(公告)号:US09542250B2

    公开(公告)日:2017-01-10

    申请号:US13606263

    申请日:2012-09-07

    IPC分类号: G06F11/07 G06F11/30

    摘要: A distributed maintenance mode system and method includes receiving an indicator that a monitored system has entered maintenance mode. Trap data is received for the monitored system. It is determined whether the monitored system is in maintenance mode based on the indicator. The trap data is stored and a billable incident ticket is generated for the monitored system if it is determined that the monitored system is not in maintenance mode. The trap data is stored and no billable incident ticket is generated for the monitored system if it is determined that the monitored system is in maintenance mode.

    摘要翻译: 分布式维护模式系统和方法包括接收被监视系统进入维护模式的指示符。 收到受监控系统的陷阱数据。 根据指标确定被监控系统是否处于维护模式。 存储陷阱数据,并且如果确定被监视系统不处于维护模式,则为被监视系统生成可计费事件票据。 如果确定受监视的系统处于维护模式,则陷阱数据被存储并且对于被监视的系统不生成可计费的事件票据。

    STORING STRUCTURED INFORMATION
    9.
    发明申请
    STORING STRUCTURED INFORMATION 审中-公开
    存储结构化信息

    公开(公告)号:US20160335259A1

    公开(公告)日:2016-11-17

    申请号:US14711926

    申请日:2015-05-14

    IPC分类号: G06F17/30 G06F21/62

    摘要: Methods and apparatuses for storing structured information are disclosed. A hash value computed over structured information determined for a host is compared to a hash value computed over a corresponding structured information stored in a remote database for the host where after an update of at least a part of the stored structured information can take place in response to determining a difference in the hash values and the stored structured information is kept in the database as it is in response to determining that the hash values are equal.

    摘要翻译: 公开了用于存储结构化信息的方法和装置。 将针对为主机确定的结构化信息计算出的散列值与对存储在用于主机的远程数据库中的对应结构化信息计算的散列值进行比较,其中可以响应于存储的结构化信息的至少一部分的更新 为了确定哈希值的差异,并且存储的结构化信息被保存在数据库中,因为它是响应于确定哈希值相等的。

    Transparent high availability for stateful services
    10.
    发明授权
    Transparent high availability for stateful services 有权
    透明的高可用性用于状态服务

    公开(公告)号:US09342348B2

    公开(公告)日:2016-05-17

    申请号:US13747348

    申请日:2013-01-22

    摘要: One embodiment of the present invention provides a system. The system includes a high availability module and a data transformation module. During operation, the high availability module identifies a modified object belonging to an application in a second system. A modification to the modified object is associated with a transaction identifier. The high availability module also identifies a local object corresponding to the modified object associated with a standby application corresponding to the application in the second system. The data transformation module automatically transforms the value of the modified object to a value assignable to the local object, including pointer conversion to point to equivalent object of the second system. The high availability module updates the current value of the local object with the transformed value.

    摘要翻译: 本发明的一个实施例提供一种系统。 该系统包括高可用性模块和数据转换模块。 在操作期间,高可用性模块识别属于第二系统中的应用的修改对象。 修改后的对象的修改与事务标识符相关联。 高可用性模块还识别与对应于第二系统中的应用的备用应用相关联的修改对象的本地对象。 数据变换模块将修改的对象的值自动转换为可分配给本地对象的值,包括指针转换以指向第二个系统的等效对象。 高可用性模块使用转换的值更新本地对象的当前值。