US 12,001,564 B2 · Runtime application monitoring without modifying application program code

Abstract

To facilitate runtime monitoring and analysis of an application without modifying the actual application code, an agent monitors and analyzes an application through detection and evaluation of invocations of an API of a runtime engine provided for execution of the application. The agent registers to receive events which are generated upon invocation of target functions of the runtime engine API based on its load. Once loaded, the agent initially determines the language and language version number of the runtime engine. The agent determines associations of events for which to monitor and corresponding analysis code to execute upon detection of the invocations based on the language and version number information. When the agent detects an event during execution of the application based on invocations of the runtime engine API, the agent can monitor and analyze execution of the application based on execution of analysis code corresponding to the detected event.

Claims20

Dependent claims

A method comprising:

based on loading an application into a runtime engine, loading an agent into the runtime engine;
determining, by the agent, a language of the runtime engine;
determining, by the agent, a plurality of target functions of an application programming interface (API) of the runtime engine based, at least in part, on the language of the runtime engine;
for each target function of the plurality of target functions of the API of the runtime engine, the agent associating the target function with a corresponding one of a plurality of analysis code units of the agent, wherein associating the target function with the analysis code unit causes execution of the analysis code unit based on invocation of the target function by the runtime engine;
based on the runtime engine invoking a first of the plurality of target functions during execution of the application, detecting, by the agent, a first event that corresponds to the invocation of the first target function;
and
executing the corresponding one of the plurality of analysis code units that was associated with the target function.

4 more elements

An apparatus comprising:

a processor;
and
a machine-readable medium having first program code and agent program code,
the first program code executable by the processor to cause the apparatus to load the agent program code into a runtime engine based on load of an application into the runtime engine;
the agent program code executable in the runtime engine to,
determine a language of the runtime engine based, at least in part, on loading of the agent program code;
determine a plurality of target functions of an application programming interface (API) of the runtime engine based, at least in part, on the language of the runtime engine;
for each target function of the plurality of target functions of the API of the runtime engine, associate the target function with a corresponding one of a plurality of analysis code units, wherein association of the target function with the analysis code unit causes execution of the analysis code unit upon invocation of the target function by the runtime engine;
based on the runtime engine invoking a first of the plurality of target functions during execution of the application, detect a first event that corresponds to the invocation of the target function;
and
execute the corresponding one of the plurality of analysis code units that was associated with the target function.

8 more elements

Dependencies are inferred from the claim text.

Runtime application monitoring without modifying application program code

Life of this patent

Runtime application monitoring without modifying application program code

Life of this patent

Abstract

Claims20