Endpoint process state collector
AssigneeDiDi Research America, LLC
InventorsDong LI, Huaiyu ZHU, Jing CHEN, Michael LIN, Shray KAPOOR, Yichong LIN
Life of this patent
Estimating the term…
Abstract
Process states of computing devices may be collected for processing. Process event information of a first computing device may be determined based on an observation of process creation events and process termination events, a garbage collection, and a process scan. The process event information may be provided to a second computing device.
Claims21
A system for collecting process states, the system comprising:
- one or more processors;
- and
- a memory storing instructions that, when executed by the one or more processors, cause the system to perform:
- determining first process event information of a first computing device based on a first observation of process creation events and process termination events, a first garbage collection, and a first process scan, the first computing device executing a first operating system, the first observation, the first garbage collection, and the first process scan being run on the first operating system, and the first observation, the first garbage collection, and the first process scan being based on a single process tracking model;
- determining second process event information of a second computing device based on a second observation of process creation events and process termination events, a second garbage collection, and a second process scan, the second computing device executing a second operating system different from the first operating system, the second observation, the second garbage collection, and the second process scan being run on the second operating system, and the second observation, the second garbage collection, and the second process scan being based on the single process tracking model;
- providing the first and second process event information to a third computing device.
A method for collecting process states, the method implemented by a computing system including one or more processors and non-transitory storage media storing machine-readable instructions, the method comprising:
- determining first process event information of a first computing device based on a first observation of process creation events and process termination events, a first garbage collection, and a first process scan, the first computing device executing a first operating system, the first observation, the first garbage collection, and the first process scan being run on the first operating system, and the first observation, the first garbage collection, and the first process scan being based on a single process tracking model;
- determining second process event information of a second computing device based on a second observation of process creation events and process termination events, a second garbage collection, and a second process scan, the second computing device executing a second operating system different from the first operating system, the second observation, the second garbage collection, and the second process scan being run on the second operating system, and the second observation, the second garbage collection, and the second process scan being based on the single process tracking model;
- providing the first and second process event information to a third computing device.
-42. (canceled)
Dependencies are inferred from the claim text.