Facebook, Inc.

Israel Nir

Lior Tubi

Nimrod Priell

Dekel Shmuel Naar

Techniques to identify application foreground/background state based on network traffic are described. In one embodiment, an apparatus may comprise a traffic monitoring component and a traffic analysis component. The traffic monitoring component may receive monitored network traffic over a monitored time period. The traffic analysis component may receive a foreground activity profile, the foreground activity profile comprising one or more signals for distinguishing between foreground activity of one or more profiled applications and background activity of the one or more profiled applications; determine one or more active foreground applications in the monitored network traffic based on the foreground activity profile, wherein determining the one or more active foreground applications comprises determining that at least a portion of the monitored network traffic comprises background activity; and log that the one or more active foreground application were active during the monitored time period. Other embodiments are described and claimed.

Techniques to identify application foreground / background state based on network traffic

Techniques to identify applications based on network traffic are described. In one embodiment, an apparatus may comprise a client record component, a traffic monitoring component, a profiling component, and a traffic analysis component. The client record component may be operative to store a client application map, the client application map to represent installations of a plurality of applications on a plurality of client devices. The traffic monitoring component may be operative to monitor training network traffic and additional network traffic on one or more network interfaces, the training network traffic generated by the plurality of client devices. The profiling component may be operative to generate a network profile map using machine learning based on the training network traffic and the client application map. The traffic analysis component may be operative to identify one or more application of the plurality of applications. Other embodiments are described and claimed.

Growing community of inventors

Tel Aviv, Israel

Israel Nir