Facebook, Inc.

Onavo Mobile Ltd.

Nimrod Priell

Lior Tubi

Israel Nir

Roi Tiger

Dekel Shmuel Naar

Gadi Eliashiv

Eran Fridman

Techniques to identify application foreground/background state based on network traffic are described. In one embodiment, an apparatus may comprise a traffic monitoring component and a traffic analysis component. The traffic monitoring component may receive monitored network traffic over a monitored time period. The traffic analysis component may receive a foreground activity profile, the foreground activity profile comprising one or more signals for distinguishing between foreground activity of one or more profiled applications and background activity of the one or more profiled applications; determine one or more active foreground applications in the monitored network traffic based on the foreground activity profile, wherein determining the one or more active foreground applications comprises determining that at least a portion of the monitored network traffic comprises background activity; and log that the one or more active foreground application were active during the monitored time period. Other embodiments are described and claimed.

Techniques to identify application foreground / background state based on network traffic

Techniques to identify applications based on network traffic are described. In one embodiment, an apparatus may comprise a client record component, a traffic monitoring component, a profiling component, and a traffic analysis component. The client record component may be operative to store a client application map, the client application map to represent installations of a plurality of applications on a plurality of client devices. The traffic monitoring component may be operative to monitor training network traffic and additional network traffic on one or more network interfaces, the training network traffic generated by the plurality of client devices. The profiling component may be operative to generate a network profile map using machine learning based on the training network traffic and the client application map. The traffic analysis component may be operative to identify one or more application of the plurality of applications. Other embodiments are described and claimed.

Techniques to identify applications based on network traffic

A proxy server and a method for determining a mobile application download attribution are provided. The method includes identifying an application downloaded from an application repository to a mobile device; analyzing previously logged requests sent from the mobile device to identify a most recent request directed to the application repository from the mobile device; analyzing the identified most recent request to detect a source that causes the application download and at least one identifier of the application; determining the download attribution respective of the source that causes the application download; and generating an application metadata respective of the download attribution and the application identifiers. This is subject to a user's privacy, opt-in, or opt-out settings.

Techniques for determining a mobile application download attribution

Growing community of inventors

Tel Aviv, Israel

Nimrod Priell