Transaction recognition and prediction using regular expressions
AssigneeComputer Associates Think, Inc.
InventorPerry R. Ross
Life of this patent
Estimating the term…
Abstract
The present invention is directed to a method and apparatus for identifying occurrences of transactions, especially in computer networks. A unique identifier, denoted “request identifier”, is associated with each service request. Accordingly, for a sequence of service requests detected, a corresponding sequence of request identifiers is generated. The request identifier sequence is compared to regular expressions that correspond to different transactions. If the request identifier sequence matches a regular expression, this sequence is deemed to represent an occurrence of that transaction.
Claims11
A system for recognizing an occurrence of a transaction, comprising:
- at least one recorder operable to monitor communication between two network components;
- and
- a monitor coupled to the at least one recorder and operable to:
- generate a sequence of service request representations representing a sequence of service requests transmitted between the two network components;
- partition the service request representations of the sequence into at least two subsets, wherein each subset of service request representations is indicative of one or more occurrences of a single transaction type;
- construct a regular expression from the one or more occurrences, wherein each of the occurrences satisfy the regular expression;
- and
- predict whether an additional sequence of service request representations is an occurrence of the transaction type by determining if the additional sequence of service request representations satisfy the regular expression.
A system for predicting occurrences of transactions, comprising:
- at least one computer readable medium;
- and
- software encoded on the at least one computer readable medium and operable when executed by one or more processors to:
- collect a sequence of service request representations;
- partition the service request representations of the sequence into subsets, wherein each subset of service request representations is expected to be indicative of one or more occurrences of a single transaction type;
- construct a regular expression from the one or more occurrences, wherein each of the occurrences satisfy the regular expression;
- and
- predict whether an additional set of service requests is an instance of the transaction type by determining if the additional set of service request representations satisfy the regular expression.
A system for predicting occurrences of transactions, comprising:
- means for collecting a sequence of service request representations;
- means for partitioning the service request representations of the sequence into subsets, wherein each subset of service request representations is expected to be indicative of one or more occurrences of a single transaction type;
- means for constructing a regular expression from the one or more occurrences, wherein each of the occurrences satisfy the regular expression;
- and
- means for predicting whether an additional set of service requests is an instance of the transaction type by determining if the additional set of service request representations satisfy the regular expression.
A system for identifying an occurrence of a transaction, comprising:
- at least one recorder operable to monitor communication between a first network component and at least one second network component;
- and
- a monitor coupled to the at least one recorder and operable to:
- receive one or more data packets communicated between the first network component and at least one second network component from the at least one recorder;
- identify a first service request associated with the one or more data packets;
- generate a service request representation associated with the first service request, the service request representation identifying a sequence of data packets associated with the first service request;
- identify a first service request identifier associated with the service request representation;
- combine the first service request identifier with at least one additional service request identifier associated with at least one additional service request to form a transaction representation;
- and
- compare the transaction representation to at least one regular expression characterizing at least one identified transaction to determine whether the transaction representation corresponds to an occurrence of one of the identified transactions.
A method for identifying an occurrence of a transaction, comprising:
- receiving one or more data packets communicated between a first network component and at least one second network component;
- identifying a first service request associated with the one or more data packets;
- generating a service request representation associated with the first service request, the service request representation identifying a sequence of data packets associated with the first service request;
- identifying a first service request identifier associated with the service request representation;
- combining the first service request identifier with at least one additional service request identifier associated with at least one additional service request to form a transaction representation;
- and
- comparing the transaction representation to at least one regular expression characterizing at least one identified transaction to determine whether the transaction representation corresponds to an occurrence of one of the identified transactions.
A system for identifying an occurrence of a transaction, comprising:
- at least one computer readable medium;
- and
- software encoded on the at least one computer readable medium and operable when executed by one or more processors to:
- receive one or more data packets communicated between a first network component and at least one second network component;
- identify a first service request associated with the one or more data packets;
- generate a service request representation associated with the first service request, the service request representation identifying a sequence of data packets associated with the first service request;
- identify a first service request identifier associated with the service request representation;
- combine the first service request identifier with at least one additional service request identifier associated with at least one additional service request to form a transaction representation;
- and
- compare the transaction representation to at least one regular expression characterizing at least one identified transaction to determine whether the transaction representation corresponds to an occurrence of one of the identified transactions.
A system for identifying an occurrence of a transaction, comprising:
- means for receiving one or more data packets communicated between a first network component and at least one second network component;
- means for identifying a first service request associated with the one or more data packets;
- means for generating a service request representation associated with the first service request, the service request representation identifying a sequence of data packets associated with the first service request;
- means for identifying a first service request identifier associated with the service request representation;
- means for combining the first service request identifier with at least one additional service request identifier associated with at least one additional service request to form a transaction representation;
- and
- means for comparing the transaction representation to at least one regular expression characterizing at least one identified transaction to determine whether the transaction representation corresponds to an occurrence of one of the identified transactions.
Dependencies are inferred from the claim text.