logo

For the Inventor, By the Inventor

The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Patent No.:

US 10936717 B1

PDFFull Text
Date of Patent:
Mar. 02, 2021

Filed:

Jan. 30, 2018

Monitoring containers running on container host devices for detection of anomalies in current container behavior

Applicant:

Emc Ip Holding Company Llc, Hopkinton, MA (US);

Inventors:

Or Herman Saffar, Beer Sheva, IL;

Amihai Savir, Sansana, IL;

Oron Golan, Meitar, IL;

Roie Ben Eliyahu, Yerucham, IL;

Assignee:

EMC IP Holding Company LLC, Hopkinton, MA (US);

Attorney:

Ryan, Mason & Lewis, LLP

Primary Examiner:

Olugbenga O Idowu

Int. Cl.
CPC ...
H04L 29/06 (2006.01); G06F 21/56 (2013.01); G06F 9/455 (2018.01); G06N 7/00 (2006.01); G06F 9/54 (2006.01); G06F 9/50 (2006.01); G06N 20/00 (2019.01);
U.S. Cl.
CPC ...
G06F 21/56 (2013.01); G06F 9/45558 (2013.01); G06F 9/5077 (2013.01); G06F 9/545 (2013.01); G06N 7/005 (2013.01); G06N 20/00 (2019.01); H04L 63/1408 (2013.01); G06F 2009/45587 (2013.01); G06F 2009/45591 (2013.01);
Abstract

A method includes monitoring data of one or more containers running on one or more container host devices, a given one of the containers providing operating-system level virtualization for running at least one application. The method also includes determining a first set of behavior metrics for the given container based on the monitoring data, the first set of behavior metrics characterizing current behavior of the given container. The method further includes generating a model characterizing normal operation of the at least one application running in the given container using a second set of behavior metrics obtained during a learning period, utilizing the model to detect one or more anomalies in the first set of behavior metrics characterizing the current behavior of the given container, generating an alert responsive to detecting one or more anomalies in the first set of behavior metrics, and delivering the alert to a client device.

Find Patent Forward Citations

Herman Saffar, Or. (2021). Monitoring containers running on container host devices for detection of anomalies in current container behavior (U.S. Patent No. 10936717). U.S. Patent and Trademark Office. https://idiyas.com/patent/badge/10936717

Data source: USPTO (United States Patent and Trademark Office) public patent records. Weekly synchronization. How IDiyas builds this profile

Loading…