The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Feb. 21, 2023

Filed:

Dec. 28, 2020
Applicant:

Sri International, Menlo Park, CA (US);

Inventors:

Phillip A. Porras, Cupertino, CA (US);

Prakhar Sharma, Menlo Park, CA (US);

Assignee:

SRI International, Menlo Park, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 11/00 (2006.01); G06F 11/34 (2006.01); G06N 10/00 (2022.01); G06N 3/08 (2023.01); H04L 9/40 (2022.01); G06F 11/36 (2006.01); H04L 61/103 (2022.01);
U.S. Cl.
CPC ...
G06F 11/3409 (2013.01); G06F 11/36 (2013.01); G06N 3/08 (2013.01); G06N 10/00 (2019.01); H04L 63/0236 (2013.01); H04L 63/1425 (2013.01); H04L 63/20 (2013.01); H04L 61/103 (2013.01); H04L 63/029 (2013.01);
Abstract

A method, apparatus and system for providing process-level forensics for a plurality of application containers includes for each of the plurality of application containers; monitoring forensics information of the application container, encoding the monitored forensics information using an encoder of a predetermined encoder/decoder pair to determine a forensics model, decoding the forensics model to determine a reconstructed representation of the forensics information, comparing the reconstructed representation of the forensics information to the monitored forensics information to determine an error and comparing the error to a threshold to determine if an error above the threshold exists. If the error is below the threshold, the forensics model is communicated to a higher-level manager to be used for higher-level management. If the error is above the threshold, the monitored forensics information of the application container is also communicated to the higher-level manager. The predetermined encoder/decoder pair is determined using an autoencoding process.


Find Patent Forward Citations

Loading…