Application monitoring through collective record and replay
AssigneeMicrosoft Corporation
InventorsBrendan Dolan-Gavitt, David Alexander Molnar, Weidong Cui
Life of this patent
Estimating the term…
Abstract
Methods and systems for application monitoring through collective record and replay are disclosed herein. The method includes recording a number of execution traces for an application from a number of user devices at a runtime library, wherein the number of execution traces relates to non-deterministic data. The method also includes replaying the number of execution traces to determine whether a behavior of the application creates a security risk.
Claims20
A method for application monitoring through collective record and replay, comprising:
- recording a plurality of execution traces for an application from a plurality of user devices at a runtime library, wherein the plurality of execution traces relates to a plurality of non-deterministic data;
- and
- replaying the plurality of execution traces to determine whether a behavior of the application creates a security risk.
A system for application monitoring through collective record and replay, comprising:
- an application configured to send a plurality of execution traces to an application programming interface (API) from a plurality of user devices, wherein the plurality of execution traces relates to a plurality of non-deterministic data;
- and
- a runtime library configured to:
- redirect the plurality of execution traces from the API to the runtime library;
- record the plurality of execution traces on a memory device;
- and
- replay the plurality of execution traces to determine whether the application is functioning as expected.
One or more non-transitory, computer-readable storage media for storing computer readable instructions, the computer-readable instructions providing a collective record and replay system when executed by one or more processing devices, the computer-readable instructions comprising code configured to:
- perform probabilistic logging for an application to record a plurality of execution traces relating to a plurality of non-deterministic data from a plurality of user devices;
- and
- determine whether the application is utilizing the plurality of non-deterministic data for an unauthorized purpose by replaying the plurality of executions traces.
Dependencies are inferred from the claim text.