公开(公告)号：US20160337199A1

公开(公告)日：2016-11-17

申请号：US15224226

申请日：2016-07-29

Applicant: Draios Inc.

Inventor： Loris Degioanni

IPC: H04L12/24 ,  H04L29/08 ,  H04L12/26

CPC classification number: H04L41/14 ,  G06F11/3006 ,  G06F11/3065 ,  G06F11/323 ,  G06F11/3495 ,  G06F2201/87 ,  H04L41/069 ,  H04L43/045 ,  H04L67/02 ,  H04L67/10

Abstract: Systems and methods for performance and security management of the computing infrastructure that supports an application deployed in a hosted computing environment are described. In one embodiment, for example, a system comprises agents installed on hosts. The agents capture and record system events from operating systems on the hosts that result from application component processes executing on the hosts. The system further includes a collection and analysis engine that obtains captured and recorded system events from the agents, identifies captured and recorded system events that pertain to an application transaction, and produces, from the identified system events, metric data reflecting quantity of computing resources used by the application component processes to process the application transaction. The system also includes a web dashboard that presents the metric data to a user, for example, on a web page.

公开(公告)号：US20150039745A1

公开(公告)日：2015-02-05

申请号：US13953970

申请日：2013-07-30

Applicant: Draios Inc.

Inventor： Loris Degioanni

IPC: H04L12/26

CPC classification number: H04L41/14 ,  G06F11/3006 ,  G06F11/3065 ,  G06F11/323 ,  G06F11/3495 ,  G06F2201/87 ,  H04L41/069 ,  H04L43/045 ,  H04L67/02 ,  H04L67/10

Abstract: Systems and methods for performance and security management of the computing infrastructure that supports an application deployed in a hosted computing environment are described. In one embodiment, for example, a system comprises agents installed on hosts. The agents capture and record system events from operating systems on the hosts that result from application component processes executing on the hosts. The system further includes a collection and analysis engine that obtains captured and recorded system events from the agents, identifies captured and recorded system events that pertain to an application transaction, and produces, from the identified system events, metric data reflecting quantity of computing resources used by the application component processes to process the application transaction. The system also includes a web dashboard that presents the metric data to a user, for example, on a web page.

Abstract translation: 描述了支持在托管计算环境中部署的应用程序的计算基础设施的性能和安全管理的系统和方法。 在一个实施例中，例如，系统包括安装在主机上的代理。 代理从在主机上执行的应用程序组件进程导致的主机上的操作系统捕获和记录系统事件。 该系统还包括收集和分析引擎，其从代理获得捕获和记录的系统事件，识别与应用事务相关的捕获和记录的系统事件，并从所识别的系统事件中产生反映所使用的计算资源量的度量数据 由应用程序组件进程处理应用程序事务。 该系统还包括一个web仪表板，其将度量数据呈现给用户，例如在网页上。

公开(公告)号：US10181981B2

公开(公告)日：2019-01-15

申请号：US15905455

申请日：2018-02-26

Applicant: Draios, Inc.

Inventor： Loris Degioanni

IPC: H04L12/24 ,  H04L12/26 ,  H04L29/08 ,  G06F11/32 ,  G06F11/30 ,  G06F11/34

Abstract: Systems and methods for performance and security management of the computing infrastructure that supports an application deployed in a hosted computing environment are described. In one embodiment, for example, a system comprises agents installed on hosts. The agents capture and record system events from operating systems on the hosts that result from application component processes executing on the hosts. The system further includes a collection and analysis engine that obtains captured and recorded system events from the agents, identifies captured and recorded system events that pertain to an application transaction, and produces, from the identified system events, metric data reflecting quantity of computing resources used by the application component processes to process the application transaction. The system also includes a web dashboard that presents the metric data to a user, for example, on a web page.

公开(公告)号：US09432270B2

公开(公告)日：2016-08-30

申请号：US13953970

申请日：2013-07-30

Applicant: Draios Inc.

Inventor： Loris Degioanni

IPC: G06F15/16 ,  H04L12/26 ,  G06F11/34 ,  G06F11/30 ,  G06F11/32

CPC classification number: H04L41/14 ,  G06F11/3006 ,  G06F11/3065 ,  G06F11/323 ,  G06F11/3495 ,  G06F2201/87 ,  H04L41/069 ,  H04L43/045 ,  H04L67/02 ,  H04L67/10

Abstract: Systems and methods for performance and security management of the computing infrastructure that supports an application deployed in a hosted computing environment are described. In one embodiment, for example, a system comprises agents installed on hosts. The agents capture and record system events from operating systems on the hosts that result from application component processes executing on the hosts. The system further includes a collection and analysis engine that obtains captured and recorded system events from the agents, identifies captured and recorded system events that pertain to an application transaction, and produces, from the identified system events, metric data reflecting quantity of computing resources used by the application component processes to process the application transaction. The system also includes a web dashboard that presents the metric data to a user, for example, on a web page.

Abstract translation: 描述了支持在托管计算环境中部署的应用程序的计算基础设施的性能和安全管理的系统和方法。 在一个实施例中，例如，系统包括安装在主机上的代理。 代理从在主机上执行的应用程序组件进程导致的主机上的操作系统捕获和记录系统事件。 该系统还包括收集和分析引擎，其从代理获得捕获和记录的系统事件，识别与应用事务相关的捕获和记录的系统事件，并且从所识别的系统事件中产生反映所使用的计算资源量的度量数据 由应用程序组件进程处理应用程序事务。 该系统还包括一个web仪表板，其将度量数据呈现给用户，例如在网页上。

公开(公告)号：US20200028760A1

公开(公告)日：2020-01-23

申请号：US16585591

申请日：2019-09-27

Applicant: Draios, Inc.

Inventor： Loris Degioanni

IPC: H04L12/24 ,  H04L12/26

Abstract: In an embodiment, a data processing method comprises transmitting, from a monitoring computer system that is programmed for monitoring one or more services, a request for information relating to new services to a cluster of computing nodes that are managing the one or more services; receiving from the cluster of nodes an indication that a new service not included in the one or more services has been created; in response to receiving the indication, creating a monitoring subsystem for performing one or more functions, which may include monitoring the new service, verifying security and/or compliance, logging the new security, and network management; assigning the monitoring subsystem to the new service; sending access information for the monitoring subsystem to one or more user computers.

公开(公告)号：US20190306197A1

公开(公告)日：2019-10-03

申请号：US16443476

申请日：2019-06-17

Applicant: DRAIOS INC.

Inventor： Loris Degioanni

IPC: H04L29/06 ,  G06F21/52

Abstract: In an embodiment, a data processing method comprises creating and storing a scoring threshold value that is associated with determining whether a baseline operation rule is to be generated; receiving, from service monitoring processes, datasets of operations performed on digital objects by processors associated with computer applications; aggregating operations and identifying operation properties from the aggregated operations to generate an aggregated baseline dataset that represents operation properties from aggregated operations; assigning score values to each of the operation properties, wherein each assigned score value represents whether a particular operation property is a candidate for generating a rule that defines expected operation property values for the particular operation property; automatically generating a set of baseline operations rules for only those operation properties that have assigned values that exceed the score threshold value. The set of baseline operations rules is programmed to detect anomalous operations that contain unexpected operation property values.

公开(公告)号：US20160357618A1

公开(公告)日：2016-12-08

申请号：US15170290

申请日：2016-06-01

Applicant: Draios Inc.

Inventor： LORIS DEGIOANNI ,  GIANLUCA BORELLO ,  LUCA MARTURANA

IPC: G06F9/54

CPC classification number: G06F9/546 ,  G06F9/45558 ,  G06F11/30 ,  G06F11/3089 ,  G06F2009/45591

Abstract: A computer-implemented method comprises executing, in a first container of a first computer system, input source instructions; executing, using the same first computer system, a plurality of containerized application programs in different corresponding containers; monitoring, by the input source instructions, the one or more different containerized application programs by identifying one or more system calls that resulted from the different container applications generating statistical messages relating to operation of the containerized application programs; generating, by the input source instructions, one or more enriched messages based on the system calls that were identified and based on the statistical messages; transmitting the one or more enriched messages to a first metric collector, and aggregating a plurality of the enriched messages into a set of aggregated metrics values; sending, from the first metric collector to a monitoring application that is hosted on a second computer system, the aggregated metrics values.

Abstract translation: 计算机实现的方法包括在第一计算机系统的第一容器中执行输入源指令; 使用相同的第一计算机系统在不同的相应容器中执行多个容器化应用程序; 通过输入源指令，通过识别由不同容器应用产生的一个或多个系统调用产生与集装箱化应用程序的操作有关的统计消息来监视一个或多个不同的集装箱化应用程序; 通过输入源指令，基于所识别的系统呼叫并基于统计消息来生成一个或多个富集的消息; 将所述一个或多个富集消息发送到第一度量收集器，以及将多个所述富集消息聚合成一组聚合度量值; 将从第一指标收集器发送到托管在第二计算机系统上的监视应用程序，汇总度量值。

公开(公告)号：US20190324882A1

公开(公告)日：2019-10-24

申请号：US15959153

申请日：2018-04-20

Applicant: Draios, Inc.

Inventor： Gianluca Borello ,  Loris Degioanni

IPC: G06F11/34 ,  G06F9/50 ,  G06F9/54 ,  G06F9/455 ,  G06F21/57 ,  G06F8/41

Abstract: A computer-implemented method of monitoring programmatic containers (containers) performed through executing a monitoring component in a user space is disclosed. The method comprises selecting, by a processor, one or more execution points from a plurality of execution points; causing, by the processor, a computer programs to be loaded into a virtual machine, the virtual machine verifying execution of the computer program before running the computer program in a kernel space; causing the computer program to be executed directly in the kernel space when execution of a process associated with one of a plurality of containers reaches the one execution point, each of the plurality of containers being associated with a distinct set of resources of a kernel of the kernel space, the computer program storing specific data in one or more memory buffers managed directly by the kernel and shared by the kernel space and the user space, the specific data including trace data related to execution of the process at the one execution point and container data related to the one container; receiving the specific data from the one or more memory buffers; causing a display of the container-specific trace data.

公开(公告)号：US10454789B2

公开(公告)日：2019-10-22

申请号：US15297070

申请日：2016-10-18

Applicant: DRAIOS INC.

Inventor： Loris Degioanni

IPC: G06F15/16 ,  H04L12/24 ,  H04L12/26

Abstract: In an embodiment, a data processing method comprises transmitting, from a monitoring computer system that is programmed for monitoring one or more services, a request for information relating to new services to a cluster of computing nodes that are managing the one or more services; receiving from the cluster of nodes an indication that a new service not included in the one or more services has been created; in response to receiving the indication, creating a monitoring subsystem for performing one or more functions, which may include monitoring the new service, verifying security and/or compliance, logging the new security, and network management; assigning the monitoring subsystem to the new service; sending access information for the monitoring subsystem to one or more user computers.

公开(公告)号：US20180255100A1

公开(公告)日：2018-09-06

申请号：US15447668

申请日：2017-03-02

Applicant: Draios Inc.

Inventor： Loris Degioanni

IPC: H04L29/06 ,  G06F21/52

CPC classification number: H04L63/20 ,  G06F21/52 ,  G06F2221/033 ,  H04L63/1425

Abstract: In an embodiment, a data processing method comprises creating and storing a scoring threshold value that is associated with determining whether a baseline operation rule is to be generated. Receiving, from service monitoring processes, datasets of operations performed on digital objects by processors associated with computer applications. Aggregating operations and identifying operation properties from the aggregated operations to generate an aggregated baseline dataset that represents operation properties from aggregated operations. Assigning score values to each of the operation properties, wherein each assigned score value represents whether a particular operation property is a candidate for generating a rule that defines expected operation property values for the particular operation property. Automatically generating a set of baseline operations rules for only those operation properties that have assigned values that exceed the score threshold value. The set of baseline operations rules programmed to detect anomalous operations that contain unexpected operation property values.