US 2023/0401122 A1Published application

Detecting, diagnosing, and alerting anomalies in network applications

AssigneeQuantum Metric, Inc.

InventorsMario Luciano Ciabarra, Jr., Adam Dille, David Murphy, Mishig Davaadorj, Clara Richter, Daniel Keogh

Life of this patent

Estimating the term…

Loading patent…

Abstract

Techniques are described herein for evaluating user activities on a website for detecting and alerting anomalies with the website. For example, an alerting system may determine a set of time-windows for each of a set of attribute value(s) and use a set of performance metrics and/or web session events for the time-windows from historical web sessions to detect an anomaly in a current time-window. The alerting system may determine an evaluation range based on weighted performance ranges, and alert a client indicating a performance anomaly if a performance metric at the time of evaluation are out of the evaluation range. Attribute value(s) related to a website issue can be identified based on a correlated to anomalous web session events or to an anomalous time-window.

Claims34

Dependent claims

A computer-implemented method comprising performing, by an alerting system:

determining one or more attribute values relating to requests from user devices for a website for at least one attribute for evaluating a website's performance, the at least one attribute corresponding to a characteristic of sessions of the user devices with the website;
for each attribute value of one or more attribute values:
determining a set of time-windows based on an evaluation time period for evaluating the web site's performance and a time of evaluation;
receiving a set of historical performance metrics for each of the set of time-windows for sessions including the attribute value;
for each time-window of the set of time-windows:
determining a performance range based on the set of historical performance metrics for the time-window;
and
assigning a weight to the performance range of the time-window, based on proximity in time of a corresponding time-window to the time of evaluation;
determining an evaluation range based on the weighted performance ranges, wherein the evaluation range corresponds to the time of evaluation;
receiving a current performance metric for the time of evaluation from the one or more capture agents, the current performance metric indicating performance of the website at the time of evaluation for the sessions including the attribute value;
determining that the current performance metric at the time of evaluation is outside the evaluation range;
and
responsive to the determining that the current performance metric at the time of evaluation is outside the evaluation range, providing an alert to a client indicating at least one anomaly in the website performance.

10 more elements

A computer-implemented method comprising performing, by an alerting system in communication with one or more capture agents associated with user devices:

determining one or more anomalous types of web session events that occur more frequently than a reference amount during a time window, wherein the web session events are related to web sessions of the user devices with webpages of a website;
for each of the one or more anomalous types of web session events:
determining a set of anomalous web sessions in which the anomalous type of web session event occurred during a time-window;
wherein the web sessions include one or more attribute values corresponding to one or more attributes,
for each of the one or more attribute values of each of the one or more attributes:
determining whether the attribute value is disproportionately present in the set of anomalous web sessions relative to a reference set of web sessions, thereby determining a segment of one or more anomalous attribute values during the time-window;
and
providing an alert including the segment of one or more anomalous attribute values for each of the one or more anomalous types of web session events.

5 more elements

A computer-implemented method comprising performing, by an alerting system in communication with one or more capture agents associated with user devices:

monitoring web session events relating to web sessions of the user devices with webpages of a web site, the monitoring using the one or more capture agents, wherein the web sessions include one or more attribute values corresponding to one or more attributes;
for each of one or more time-windows:
determining, using the web session events during the time-window, whether the website exhibits anomalous behavior during the time-window, wherein a first time-window exhibits the anomalous behavior;
identifying a first set of web sessions during the first time-window;
identifying a reference set of web sessions during one or more reference time-windows that do not exhibit anomalous behavior;
for each of the one or more attribute values of each of the one or more attributes:
determining whether the attribute value is disproportionately present in the first set of web sessions relative to the reference set of web sessions, thereby determining a segment of one or more anomalous attribute values during the first time-window;
and
providing an alert including the segment of one or more anomalous attribute values.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/237,581Filed 24 Aug 2023
Priority: 2 Feb 2021
Published: 14 Dec 2023
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

G06F 11/079
Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of…
G06F 11/3419
For performance assessment: by assessing time
G06F 11/0757
By exceeding limits: by exceeding a time limit, i.e. time-out, e.g. watchdogs
G06F 11/0778
Error or fault reporting or storing: dumping, i.e. gathering error/state information after a fault for later diagnosis

Family

Application63/144,673Us provisional application · filed 2 Feb 2021
Application17/591,482Continuation · filed 2 Feb 2022
Application18/237,581Continuation
US 11,789,805 B2Related patent
US 12,423,171 B2Related patent
US 2022/0245013 A1Published application
US 2023/0401122 A1This patent

From the US filing history. Foreign family members aren’t listed.