US 2020/0351284 A1Published application

Generating summaries of messages associated with assets in an enterprise system

AssigneeEMC IP Holding Company LLC

InventorsSashka T. Davis, Kevin J. Arunski, Zulfikar A. Ramzan, Scott Moore, Abram Q. Thielke, Ed G. Quackenbush, Matthew D. Tharp

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

A method includes obtaining messages associated with assets in an enterprise system, splitting each of the messages into a set of tokens, determining a count of a number of occurrences of each of the tokens, and assigning weights to the tokens based at least in part on the counts of the number of occurrences of the tokens. The method also includes determining a score for each of the messages based at least in part on a combined sum of the weights for the set of tokens of that message, generating a summary of the messages by selecting a subset of the messages for based at least in part on the scores. The method further includes identifying remedial actions to be applied to assets in the enterprise system based at least in part on the summary of the messages, and implementing at least one of the identified remedial actions.

Claims20

Dependent claims

A method comprising:

obtaining a plurality of messages associated with one or more assets in an enterprise system, a given one of the assets comprising at least one of a physical computing resource and a virtual computing resource in the enterprise system;
splitting each of the plurality of messages into a set of tokens;
determining a count of a number of occurrences of each of the tokens in the plurality of messages;
assigning weights to each of the tokens, the weight assigned to a given one of the tokens being based at least in part on the count of the number of occurrences of the given token in the plurality of messages;
determining a score for each of the plurality of messages, the score for a given one of the plurality of messages being based at least in part on a combined sum of the weights for the set of tokens of the given message;
generating a summary of the plurality of messages by selecting a subset of the plurality of messages for inclusion in the summary based at least in part on the scores for the plurality of messages;
identifying one or more remedial actions to be applied to at least one of the assets in the enterprise system based at least in part on the summary of the plurality of messages;
and
implementing at least one of the identified remedial actions for the at least one asset in the enterprise system;
wherein the method is performed by at least one processing device comprising a processor coupled to a memory.

7 more elements

A computer program product comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device:

to obtain a plurality of messages associated with one or more assets in an enterprise system, a given one of the assets comprising at least one of a physical computing resource and a virtual computing resource in the enterprise system;
to split each of the plurality of messages into a set of tokens;
to determine a count of a number of occurrences of each of the tokens in the plurality of messages;
to assign weights to each of the tokens, the weight assigned to a given one of the tokens being based at least in part on the count of the number of occurrences of the given token in the plurality of messages;
to determine a score for each of the plurality of messages, the score for a given one of the plurality of messages being based at least in part on a combined sum of the weights for the set of tokens of the given message;
to generate a summary of the plurality of messages by selecting a subset of the plurality of messages for inclusion in the summary based at least in part on the scores for the plurality of messages;
to identify one or more remedial actions to be applied to at least one of the assets in the enterprise system based at least in part on the summary of the plurality of messages;
and
to implement at least one of the identified remedial actions for the at least one asset in the enterprise system.

6 more elements

An apparatus comprising:

at least one processing device comprising a processor coupled to a memory;
the at least one processing device being configured:
to obtain a plurality of messages associated with one or more assets in an enterprise system, a given one of the assets comprising at least one of a physical computing resource and a virtual computing resource in the enterprise system;
to split each of the plurality of messages into a set of tokens;
to determine a count of a number of occurrences of each of the tokens in the plurality of messages;
to assign weights to each of the tokens, the weight assigned to a given one of the tokens being based at least in part on the count of the number of occurrences of the given token in the plurality of messages;
to determine a score for each of the plurality of messages, the score for a given one of the plurality of messages being based at least in part on a combined sum of the weights for the set of tokens of the given message;
to generate a summary of the plurality of messages by selecting a subset of the plurality of messages for inclusion in the summary based at least in part on the scores for the plurality of messages;
to identify one or more remedial actions to be applied to at least one of the assets in the enterprise system based at least in part on the summary of the plurality of messages;
and
to implement at least one of the identified remedial actions for the at least one asset in the enterprise system.

8 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/402,313Filed 3 May 2019
Published: 5 Nov 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

H04L 63/1425
By monitoring network traffic: traffic logging, e.g. anomaly detection
G06F 21/554
Detecting local intrusion or implementing counter-measures: involving event detection and direct action
G06F 40/284
Recognition of textual entities: lexical analysis, e.g. tokenisation or collocates
G06F 40/295
Phrasal analysis, e.g. finite state techniques or chunking: named entity recognition