Patent ID: 9705817
Date: 2017-07-11
CPC Classifications: G06F,H04L

Claim:
1. A method comprising: creating or receiving, by one or more computers, a language syntax to define at least in part: receiving or obtaining or being presented, by the one or more computers, with the run-time data comprising a stream of messages for systems of a first plurality of the user IDs, wherein the runtime data for a respective one of the user IDs comprises and/or is derived from run-time instantiations of objects occurring on the monitored computer for the respective user ID, with the objects comprising one or more selected from the group of methods, system objects, object events, dynamic GUI objects, network component objects, wherein the object events comprise at least one selected from the group of operating system events, application events, and web browser events and network events generated or affecting directly or indirectly the respective monitored computer; parsing, by the one or more computers, to apply the language syntax to the stream of messages to extract a stream of the contextualized token instances from the stream of messages based at least in part on the language syntax; detecting, by the one or more computers, from the stream of the token instances, a stream of the deterministic user event instances, based at least in part on the language syntax; selecting, by the one or more computers, a plurality of the Markov chains containing one or more of the state type instances that are implied from the stream of messages, based at least in part on the respective probability weights of the state types from the deterministic user event instances that were detected; computing, by the one or more computers, a probability that the observed system is executing the respective pattern type for each of the respective Markov chains selected; and determining, by the one or more computers, based at least in part on one or more of the selected Markov chains and next state transitions in the respective Markov chains selected and/or one or more of predicted states in the respective Markov chains selected, predicted prioritization data for electronic resources for the observed system and/or a predicted level of electronic resources that may be needed by the system generating the messages.