Patent Document ID: 7958069
Application ID: 13007643

Base Claim:
1. A computer-readable medium comprising computer-readable instructions for determining at least one dependency between a plurality of events in a computer network, said computer-readable instructions comprising instructions that: use a probabilistic model to list possible dependencies between a plurality of input packets and a plurality of output packets of a plurality of channels or a plurality of services in the computer network; use the probabilistic model to establish an expected strength of a causal relationship between the events in the computer network; observe a plurality of times of occurrence between the events in the computer network; and determine the at least one dependency based on the probabilistic model and the times of occurrence between the events.

---

Claim 4:
4. The computer-readable medium of claim 1 , further comprising instructions that determine whether abnormal system behavior exists in the computer network based on the probabilistic model and the times of occurrence between the events.