公开(公告)号：WO2019060043A1

公开(公告)日：2019-03-28

申请号：PCT/US2018/043802

申请日：2018-07-26

Applicant: NEC LABORATORIES AMERICA, INC.

Inventor： XU, Jianwu ,  ZHANG, Hui ,  CHEN, Haifeng ,  NIE, Bin

IPC: G06F11/34 ,  G06F11/30 ,  G01N3/08

Abstract: Methods and systems for system maintenance include identifying patterns in heterogeneous logs. Predictive features are extracted from a set of input logs based on the identified patterns. It is determined that the predictive features indicate a future system failure using a first model. A second model is trained, based on a target sample from the predictive features and based on weights associated with a distance between the target sample and a set of samples from the predictive features, to identify one or more parameters of the second model associated with the future system failure. A system maintenance action is performed in accordance with the identified one or more parameters.

公开(公告)号：WO2017164946A1

公开(公告)日：2017-09-28

申请号：PCT/US2016/067730

申请日：2016-12-20

Applicant: NEC LABORATORIES AMERICA, INC.

Inventor： ANCHURI, Pranay ,  ZHANG, Hui ,  JIANG, Guofei

IPC: G06F11/00 ,  G06F11/30

Abstract: A computer-implemented method provides an early warning of an impending failure in a monitored system. The method includes performing, by a processor, an offline model learning process that generates a model of expected log rates in the monitored system from historical log data. The model represents a normal behavior of the monitored system. The method further includes performing an online detection process that detects the impending failure in the monitored system prior to an actual occurrence thereof based on (i) the model of expected log rates and (ii) observed log rates. The method also includes displaying, by a display device based on (i) the model of expected log rates and (ii) observed log rates in the monitored system, information relating to the impending failure prior to the actual occurrence of the impending failure. The online detection process identifies short term and long term failures and long term failures.

Abstract translation: 计算机实现的方法提供受监控系统即将发生故障的早期预警。 该方法包括由处理器执行离线模型学习过程，该离线模型学习过程从历史日志数据中生成所监视的系统中的期望的日志率的模型。 该模型表示受监视系统的正常行为。 该方法进一步包括基于（i）预期的测井速率模型和（ii）观察到的测井速率，执行在线检测过程，其在实际发生之前检测被监测系统中的即将发生的故障。 该方法还包括由显示装置基于（i）预期的测井速率模型和（ii）在被监测的系统中观测到的测井速率来显示与即将发生的即将发生的失效之前即将发生的失效有关的信息。 在线检测流程可识别短期和长期故障以及长期故障。

公开(公告)号：WO2016048652A1

公开(公告)日：2016-03-31

申请号：PCT/US2015/048967

申请日：2015-09-08

Applicant: NEC LABORATORIES AMERICA, INC.

Inventor： ZHANG, Hui ,  XU, Jianwu ,  GUOFEI, Jiang ,  YOSHIHIRA, Kenji

IPC: G06F11/34 ,  G06F11/30

CPC classification number: G06N99/005

Abstract: A method and system are provided. The method includes performing (320), by a logs-to-time-series converter, a logs-to-time-series conversion by transforming a plurality of heterogeneous logs into a set of time series. Each of the heterogeneous logs includes a time stamp and text portion with one or more fields. The method further includes performing (330), by a time-series-to-sequential-pattern converter, a time-series-to-sequential-pattern conversion by mining invariant relationships between the set of time series, and discovering sequential message patterns and association rules in the plurality of heterogeneous logs using the invariant relationships. The method also includes executing (340), by a processor, a set of log management applications, based on the sequential message patterns and the association rules.

Abstract translation: 提供了一种方法和系统。 该方法包括：通过日志到时间序列转换器，通过将多个异构日志变换为一组时间序列来执行（320）日志到时间序列转换。 每个异类日志包括具有一个或多个字段的时间戳和文本部分。 该方法还包括通过时间序列顺序模式转换器对时间序列到序列模式转换执行（330），该时间序列到序列模式转换通过挖掘该组时间序列之间的不变关系，并且发现顺序消息模式和 使用不变关系在多个异构日志中的关联规则。 该方法还包括基于顺序消息模式和关联规则，由处理器执行（340）一组日志管理应用程序。

公开(公告)号：WO2015153178A1

公开(公告)日：2015-10-08

申请号：PCT/US2015/022116

申请日：2015-03-24

Applicant: NEC LABORATORIES AMERICA, INC.

Inventor： ARORA, Nipun ,  RHEE, Junghwan ,  ZHANG, Hui ,  JIANG, Guofei

IPC: G06F9/30 ,  G06F9/445

CPC classification number: G06F11/3466

Abstract: The present invention enables capturing API level calls using a combination of dynamic instrumentation and library overriding. The invention allows event level tracing of API function calls and returns, and is able to generate an execution trace. The instrumentation is lightweight and relies on dynamic library/shared library linking mechanisms in most operating systems. Hence we need no source code modification or binary injection. The tool can be used to capture parameter values, and return values, which can be used to correlate traces across API function calls to generate transaction flow logic.

Abstract translation: 本发明可以使用动态检测和库重写的组合捕获API级别调用。 本发明允许API函数调用和返回的事件级别跟踪，并且能够生成执行跟踪。 该仪器是轻量级的，并且依赖于大多数操作系统中的动态库/共享库链接机制。 因此，我们不需要源代码修改或二进制注入。 该工具可用于捕获参数值和返回值，可用于将API函数调用之间的跟踪相关联，以生成事务流逻辑。

公开(公告)号：WO2015057617A1

公开(公告)日：2015-04-23

申请号：PCT/US2014/060358

申请日：2014-10-14

Applicant: NEC LABORATORIES AMERICA, INC.

Inventor： RHEE, Junqhwan ,  ZHANG, Hui ,  ARORA, Nipun ,  JIANG, Guofei ,  KIM, Chung Hwan

IPC: G06F11/36

CPC classification number: G06F11/3636 ,  G06F11/3419

Abstract: Methods and systems for performance inference include inferring an internal application status based on a unified call stack trace that includes both user and kernel information by inferring user function instances. A calling context encoding is generated that includes information regarding function calling paths. The analysis includes performing a top-down latency breakdown and ranking calling contexts according to how costly each function calling path is.

Abstract translation: 用于性能推理的方法和系统包括通过推断用户功能实例来推断基于包括用户和内核信息的统一调用堆栈跟踪的内部应用程序状态。 生成包含有关函数调用路径的信息的调用上下文编码。 分析包括根据每个功能调用路径的代价昂贵地执行自上而下的延迟故障和排序呼叫上下文。

公开(公告)号：WO2011088261A2

公开(公告)日：2011-07-21

申请号：PCT/US2011/021206

申请日：2011-01-13

Applicant: NEC LABORATORIES AMERICA, INC.

Inventor： ZHANG, Hui ,  SU, Ya-Yunn ,  JIANG, Guofei ,  YOSHIHIRA, Kenji

CPC classification number: G06F1/3206 ,  G06F9/5077 ,  G06F9/5094 ,  Y02D10/22 ,  Y02D10/36

Abstract: A method and system for coordinating energy management in a virtualized data center including a plurality of physical servers and a plurality of virtual machines (VMs), includes analyzing status information about the virtualized data center; determining server utilization target settings for server consolidation from the analyzed status information; and executing the server consolidation according to the determined server utilization target settings. Server consolidation can be executed by determining an effective size of each of the VMs and placing the VMs on the servers in a selective manner using an independent workload VM placement process, a correlation-aware VM placement process, or a migration-cost and correlation-aware VM placement process.

Abstract translation: 一种用于协调包括多个物理服务器和多个虚拟机（VM）的虚拟化数据中心中的能量管理的方法和系统，包括分析关于虚拟化数据中心的状态信息; 从分析的状态信息确定服务器整合的服务器利用目标设置; 并根据确定的服务器利用目标设置执行服务器合并。 可以通过确定每个虚拟机的有效大小并使用独立的工作负载VM放置过程，相关感知的VM放置过程或迁移成本和相关性 - 以选择性方式将VM放置在服务器上来执行服务器整合。 意识到VM放置过程。

公开(公告)号：EP3186932A1

公开(公告)日：2017-07-05

申请号：EP15835856.4

申请日：2015-08-21

Applicant: NEC Laboratories America, Inc.

Inventor： LUMEZANU, Cristian ,  JIN, Cheng ,  ZHANG, Hui ,  SHARMA, Abhishek ,  XU, Qiang ,  ARORA, Nipun ,  JIANG, Guofei

IPC: H04L12/721 ,  H04L12/761 ,  H04L12/937 ,  H04L12/64

Abstract: Systems and methods for controlling legacy switch routing in one or more hybrid networks of interconnected computers and switches, including generating a network underlay for the one or more hybrid networks by generating a minimum spanning tree (MST) and a forwarding graph (FWG) over a physical network topology of the one or more hybrid networks, determining an optimal path between hosts on the FWG by optimizing an initial path with a minimum cost mapping, and adjusting the initial path to enforce the optimal path by generating and installing special packets in one or more programmable switches to trigger installation of forwarding rules for one or more legacy switches.

Abstract translation: 用于控制互连计算机和交换机的一个或多个混合网络中的传统交换机路由的系统和方法，包括通过在一个或多个混合网络上生成最小生成树（MST）和转发图（FWG）来生成一个或多个混合网络的网络底层 一个或多个混合网络的物理网络拓扑，通过使用最小成本映射优化初始路径来确定FWG上的主机之间的最佳路径，并且通过在一个或多个混合网络中生成并安装特定分组来调整初始路径以实施最佳路径，或 更多可编程交换机来触发安装一个或多个传统交换机的转发规则。

公开(公告)号：EP3183848A1

公开(公告)日：2017-06-28

申请号：EP15833008.4

申请日：2015-08-20

Applicant: NEC Laboratories America, Inc.

Inventor： XU, Qiang ,  LUMEZANU, Cristian ,  LIU, Zhuotao ,  ARORA, Nipun ,  SHARMA, Abhishek ,  ZHANG, Hui ,  JIANG, Guofei

IPC: H04L12/751 ,  G06F9/455

CPC classification number: H04L41/12 ,  G06F9/45533 ,  H04L41/083 ,  H04L43/087 ,  H04L45/02 ,  H04L45/121 ,  H04L45/123 ,  H04L45/124

Abstract: Systems and methods for decoupled searching and optimization for one or more data centers, including determining a network topology for one or more networks of interconnected computer systems embedded in the one or more data center, searching for routing candidates based on a network topology determined, and updating and applying one or more objective functions to the routing candidates to determine an optimal routing candidate to satisfy embedding goals based on tenant requests, and to embed the optimal routing candidate in the one or more data centers.

Abstract translation: 用于对一个或多个数据中心进行解耦搜索和优化的系统和方法，包括确定嵌入在一个或多个数据中心中的互连计算机系统的一个或多个网络的网络拓扑，基于确定的网络拓扑搜索路由候选，以及 更新并将一个或多个目标函数应用于路由候选者以基于租户请求确定最佳路由候选者以满足嵌入目标，并且将最佳路由候选者嵌入到一个或多个数据中心中。

公开(公告)号：EP3085022A1

公开(公告)日：2016-10-26

申请号：EP14870677.3

申请日：2014-12-19

Applicant: NEC Laboratories America, Inc.

Inventor： ZHANG, Hui ,  RHEE, Junghwan ,  ARORA, Nipun ,  LUMEZANU, Cristian ,  JIANG, Guofei

IPC: H04L12/26

CPC classification number: H04L41/0631 ,  H04L41/069 ,  H04L41/14 ,  H04L43/0858

Abstract: A computer implemented method for network monitoring includes providing network packet event characterization and analysis for network monitoring that includes supporting summarization and characterization of network packet traces collected across multiple processing elements of different types in a virtual network, including a trace slicing to organize individual packet events into path-based trace slices, a trace characterization to extract at least 2 types of feature matrix describing those trace slices, and a trace analysis to cluster, rank and query packet traces based on metrics of the feature matrix.

Abstract translation: 一种用于网络监测的计算机实现方法包括为网络监测提供网络分组事件表征和分析，其包括支持在虚拟网络中跨越不同类型的多个处理元件收集的网络分组跟踪的摘要和表征，包括用于组织各个分组事件的跟踪分片 基于路径的跟踪片，跟踪表征，以提取描述这些跟踪片段的至少2种类型的特征矩阵，以及基于特征矩阵的度量的集群，排序和查询分组跟踪的跟踪分析。

公开(公告)号：EP3031174A1

公开(公告)日：2016-06-15

申请号：EP14834489.8

申请日：2014-08-07

Applicant: NEC Laboratories America, Inc.

Inventor： ARORA, Nipun ,  ZHANG, Hui ,  LUMEZANU, Cristian ,  RHEE, Junghwan ,  JIANG, Guofei ,  LU, Hui

IPC: H04L12/24 ,  H04L12/64

CPC classification number: H04L41/082 ,  H04L12/4675 ,  H04L41/0226 ,  H04L41/0803 ,  H04L41/12 ,  H04L41/20

Abstract: Method and systems for controlling a hybrid network having software-defined network (SDN) switches and legacy switches include initializing a hybrid network topology by retrieving information on a physical and virtual infrastructure of the hybrid network; generating a path between two nodes on the hybrid network based on the physical and virtual infrastructure of the hybrid network; generating a virtual local area network by issuing remote procedure call instructions to legacy switches in accordance with a network configuration request; and generating an SDN network slice by issuing SDN commands to SDN switches in accordance with the network configuration request.

Abstract translation: 用于控制具有软件定义网络（SDN）交换机和传统交换机的混合网络的方法和系统包括：通过检索混合网络的物理和虚拟基础设施上的信息来初始化混合网络拓扑; 基于混合网络的物理和虚拟基础设施，在混合网络上的两个节点之间生成路径; 通过根据网络配置请求向传统交换机发出远程过程呼叫指令来产生虚拟局域网; 以及根据网络配置请求向SDN交换机发出SDN命令来生成SDN网络切片。