Patent ID: 8812586
Filing Date: 2014-08-19
Classification: H04L

Abstract:
1. A computer-implemented method for correlating status information generated in a computer network by computer servers and application programs, the method comprising: receiving, by a computing system and for each particular computer server in a group of computer servers, server status information that identifies a status of the particular computer server at each of various times; receiving, by the computing system and for each particular application program in a group of application programs that are executing on various ones of the computer servers in the group of computer servers, application status information that identifies a status of the particular application program at each of various times; generating, by the computing system, a network signature for each of multiple times in order to generate multiple network signatures for the multiple times, wherein each particular network signature of the multiple network signatures identifies, for a respective one of the multiple times a status of each of the computer servers in the group of computer servers and a status of each of the application programs in the group of application programs, wherein generating the multiple network signatures uses (i) the server status information received for each particular computer server in the group of computer servers, and (ii) the application status information received for each particular application program in the group of application programs; and associating, by the computing system, each particular network signature of the multiple network signatures with data that identifies relationships, at a corresponding one of the multiple times, between (i) which application programs in the group of application programs were executing on which computer servers in the group of computer servers at the corresponding one of the multiple times, and (ii) which of the application programs in the group of application programs were in communication with each other at the corresponding one of the multiple times, wherein a first network signature of the multiple network signatures is associated with data that identifies relationships at a first time of the multiple times and a second network signature of the multiple network signatures is associated with data that identifies relationships at a second time of the multiple times.