System and method for generating data structures representing relationships among entities in network infrastructure

Abstract

The present invention relates to a system and a method for generating a data structure and may comprise: on the basis of data collected in a computing environment, generating a data structure representing entities and relationships among the entities within a network infrastructure as nodes and edges; processing the edges to integrate additional edge information and generate enhanced edge information; and determining a multidimensional enhanced edge type by integrating a plurality of pieces of additional information regarding each edge. According to the present invention, the relationships among entities may be immediately identified, and changes may be output in real time.

Description

System and method for generating data structures representing relationships between entities in network infrastructure

[0001] This application claims the benefit of Korean Patent Application No. 10-2023-0178832, filed December 11, 2023, with the Korean Intellectual Property Office, the entire contents of which are incorporated herein by reference.

[0002] The present invention relates to a system and method for generating a data structure representing relationships between entities found in a network infrastructure, and more particularly, to a system and method for generating a data structure by identifying relationships between entities in a large-scale network infrastructure, encoding additional information about the relationships between entities to provide enhanced edge information, and determining a multidimensional edge type.

[0003] Large-scale network infrastructures typically include numerous distributed, dynamic applications, potentially involving microservice architectures or containers. Relationships between entities in network infrastructures can change frequently, making it difficult to immediately detect changes in the network infrastructure structure.

[0004] Traditional tools typically rely on user-provided configuration files that map network infrastructure, identify relationships between entities, and generate data structures, and then update the files whenever the infrastructure changes to reflect the changes.

[0005] Alternatively, traditional tools create data structures by providing users with all data without removing noise and allowing users to manually label it as relevant or irrelevant.

[0006] Furthermore, according to conventional technology, complex relationships between entities in large-scale network infrastructure were presented as is to users, making it difficult to immediately determine which data to examine when determining operational status.

[0007] Therefore, there is a need to provide users with a technology that allows them to visually and intuitively understand the relationships between entities and reflect changes in the structure in real time.

[0008] Therefore, the technical problem that the present invention seeks to solve is to provide a technology for generating a data structure that can immediately identify relationships between entities and output changes in real time.

[0009] A data structure generation system according to one aspect of the present invention for solving the above technical problem may include a data structure generation server that generates a data structure representing entities and relationships between entities within a network infrastructure as nodes and edges based on data collected in a computing environment, processes basic edges to integrate edge additional information, and determines a multidimensional edge type between nodes; and an event data DB that stores the data structure information.

[0010] At this time, the data structure generation server may include a collection module that collects a data stream including usage data generated from a network infrastructure; and a processing module that generates a data structure expressed as nodes and edges based on the collected data, processes the edges to integrate two or more pieces of additional information about relationships between entities, and determines a multidimensional enhanced edge type between nodes.

[0011] In addition, the processing module can encode the enhanced edge type of the corresponding edge through a code matching each of the enhanced edge types and store the encoded enhanced edge type in the event data DB.

[0012] In addition, the processing module may include an additional information integration module that integrates two or more additional pieces of information about relationships between entities by processing the edge; and a multidimensional edge determination module that encodes an enhanced edge type generated through two or more additional information processing and determines a multidimensional enhanced edge type.

[0013] Additionally, the monitoring tool may further include a visualization tool for displaying the encoded multidimensional enhanced edge types through a user interface of a client device.

[0014] At this time, the monitoring tool can visualize the encoded multidimensional enhanced edge type by utilizing two or more elements among the thickness of the edge, the density of points within the edge, the color of the edge, the type of the edge line, the key, and the lock symbol.

[0015] In addition, the monitoring tool includes a response module that processes a request for the network infrastructure of the client device, and when the request is made, the monitoring tool can immediately visually output an enhanced edge type corresponding to a stored code related to the data structure of the corresponding node and edges.

[0016] Additionally, the additional information may include one or more of traffic volume, error rate, latency, encryption, authentication, protocol type, payload type, packet size, reliability, redundancy, and security.

[0017] In addition, data collection for data structure creation can be executed without increasing the resources required for collection by dynamically programming the communication data of each service workload at the kernel level.

[0018] Meanwhile, a method for generating a data structure according to one aspect of the present invention for solving the above technical problem may include a step of generating a data structure representing entities and relationships between entities within a network infrastructure as nodes and edges based on data collected in a computing environment; a step of processing the edges to integrate edge additional information and generate enhanced edge information; and a step of integrating a plurality of additional pieces of information for each edge to determine a multidimensional enhanced edge type.

[0019] And, the step of determining the multidimensional enhanced edge type may include the step of processing the edge to integrate two or more additional pieces of information about relationships between entities; and the step of encoding the enhanced edge type generated through the two or more additional pieces of information processing and determining the multidimensional enhanced edge type.

[0020] Also, after the step of determining the multidimensional enhanced edge type,

[0021] The step of generating and storing event data conforming to the enhanced data structure may further include;

[0022] And, the step of visualizing the encoded multidimensional enhanced edge type and displaying it through a user interface of a client device may be further included.

[0023] At this time, the visualization can visualize an enhanced multidimensional edge type encoded by utilizing two or more elements of the thickness of the edge, the density of points within the edge, the color of the edge, the type of the edge line, the key, and the lock symbol.

[0024] In addition, the step of displaying through the user interface of the client device may include the step of receiving a request for the network infrastructure of the client device; and the step of visually outputting an enhanced edge type corresponding to a stored symbol in relation to the data structure of the corresponding nodes and edges.

[0025] Additionally, the additional information may include one or more of traffic volume, error rate, latency, encryption, authentication, protocol type, payload type, packet size, reliability, redundancy, and security.

[0026] Additionally, for data structure generation, a step of dynamically programming communication data of each service workload at the kernel level to collect data from the computing environment without increasing the resources required for collection may be further included.

[0027] As described above, according to the present invention, relationships between entities can be intuitively understood.

[0028] Additionally, according to the present invention, changes in network infrastructure can be immediately reflected and visually output to the user.

[0029] And according to the present invention, the relationship between entities can be provided as visual and compact information in the form of a multidimensional edge type.

[0030] FIG. 1 is an example of a computing environment in which a data structure generation system according to one aspect of the present invention generates a data structure that identifies relationships between entities of an infrastructure.

[0031] FIG. 2 is a drawing illustrating a processing process of integrating additional information into edge information of a data structure to improve the data structure according to one aspect of the present invention.

[0032] FIG. 3 is an example of a data structure composed of nodes and edges according to one aspect of the present invention.

[0033] FIG. 4 is an example of a code matching an improved edge type according to one aspect of the present invention.

[0034] FIG. 5 is an example of a matching table between enhanced edge information and corresponding codes for encoding that express additional information according to one aspect of the present invention.

[0035] FIG. 6 is an example of a process for integrating and encoding enhanced edge information into additional information to determine a multidimensional edge type, according to one aspect of the present invention.

[0036] FIG. 7 is an example of visualized data displayed on the web according to one aspect of the present invention.

[0037] FIG. 8 is a diagram illustrating a process for generating an improved data structure according to one aspect of the present invention.

[0038] FIG. 9 is a drawing illustrating a process of visualizing and outputting a data structure according to a user request according to one aspect of the present invention.

[0039] Below, with reference to the attached drawings, embodiments of the present invention are described in detail so that those skilled in the art can easily implement the invention. However, the present invention can be implemented in various different forms and is not limited to the embodiments described herein. In addition, in the drawings, parts irrelevant to the description are omitted to clearly explain the present invention, and similar parts are designated with similar reference numerals throughout the specification.

[0040] Throughout the specification, whenever a part is said to "include" a component, this does not mean that it excludes other components, but rather that it may include other components, unless otherwise stated.

[0041] Additionally, terms such as “part,” “unit,” and “module” described in the specification mean a unit that processes at least one function or operation, which may be implemented by hardware, software, or a combination of hardware and software.

[0042] The devices described in the present invention are comprised of hardware including at least one processor, a memory device, a communication device, and the like, and a program that is executed by being combined with the hardware and stored in a designated location. The hardware has a configuration and performance capable of executing the method of the present invention. The program includes instructions that implement the operating method of the present invention described with reference to the drawings, and executes the present invention by being combined with hardware such as a processor and a memory device.

[0043] In this specification, “transmitting or providing” may include not only direct transmission or providing, but also indirect transmission or providing via another device or by using a bypass route.

[0044] In this specification, expressions described in the singular may be interpreted as singular or plural, unless explicit expressions such as “one” or “single” are used.

[0045] In this specification, the same drawing numbers refer to the same components regardless of the drawings, and “and / or” includes each and every combination of one or more of the mentioned components.

[0046] In this specification, terms including ordinal numbers, such as "first" and "second," may be used to describe various components, but these components are not limited by these terms. These terms are used solely to distinguish one component from another. For example, without departing from the scope of the present disclosure, a first component could be referred to as a "second component," and similarly, a second component could also be referred to as a "first component."

[0047] In the flowcharts described with reference to the drawings in this specification, the order of operations may be changed, several operations may be merged, some operations may be split, and certain operations may not be performed.

[0048] First, the data structure generation system described herein can generate structured data representing relationships identified between, for example, other computing systems or large-scale network systems. The data structure generation system can analyze usage data generated during the operation of the computing system. For example, the computing system can generate data, such as log data, when responding to data requests from other computing systems or applications.

[0049] Typically, in a network infrastructure, each system is associated with one or more entities operating within the network infrastructure, and includes multiple entities associated with the system configured to communicate with each other. As systems within a large network interact with each other, entities associated with each system become active and can become connected.

[0050] According to the present invention, a data structure generation system can generate a structure by determining which entities are involved while a large-scale network system is operating, can receive a data stream containing usage data such as log messages, performance metrics, and event data generated for one or more systems, and can generate a structured representation of the network infrastructure from the usage data.

[0051] A data structure generation system according to one aspect of the present invention updates a data structure in response to changes detected in a network infrastructure and can associate one or more entities in the data structure with each other.

[0052] A data structure generation system according to one aspect of the present invention can determine, in response to a user request, which other entities in the network infrastructure a particular entity is associated with and output the result to the user.

[0053] More specifically, FIG. 1 illustrates an embodiment of a computing environment for providing a data structure that identifies relationships between entities in a network infrastructure. The computing environment may include a client (100), a computing system (200), and a data structure generation system (300) configured to receive a data stream from the computing system (200).

[0054] A client (100) can access a data structure generation system (300) via a network. The data structure generation system (300) can be configured to receive a data stream generated by a computing system (200). The data structure generation system (300) can convert the data stream into structured data.

[0055] The client (100) can access the data structure generated by the data structure generation system (300) and display it to the user through the user interface of the client (100).

[0056] The computing system (200) may include a network infrastructure, which may include a plurality of entities. The entities may be configured to perform IT operations for a large-scale network, such as data processing and retrieval.

[0057] For example, as illustrated, the computing system (200) may include multiple services as entities. Specifically, a service may include execution logic configured to respond to a request to perform a specific task. Dashboards, performance metrics, tags, and notifications are also examples of entities.

[0058] In FIG. 1, a computing system (200) may include interacting services A, B, C, D, and E, for example, one application may be configured to call services A, B, and C, and another application may be configured to call services D and E.

[0059] The data structure generation system (300) may be configured to analyze specific usage data generated by a computing system (200) referencing the entity and connect relationships between entities. Whenever there is a change in an application or network infrastructure, the data structure generation system (300) may generate a data structure reflecting the change based on the data stream received from the computing system (200).

[0060] The data structure generation system (300) may include a data structure generation server (310) and an event data DB (320).

[0061] The data structure generation server (310) can generate and update a data structure describing the network infrastructure based on the collected data, including a response module (311), a collection module (313), a processing module (315), and a monitoring tool (317), and can output the data structure as a graph through a user screen.

[0062] The event data DB (320) can store data structure information representing entities and relationships between entities.

[0063] More specifically, the response module (311) can respond to a query about the network infrastructure from, for example, a client (100). Specifically, a user can send a query about service A through the client (100). At this time, the response module (311) can search the data structure generated by the processing module (315) to determine an entity associated with service A.

[0064] And the response module (311) can enable data related to the identified entity to be transmitted through the monitoring tool (317) and displayed on the user interface of the client (100).

[0065] The collection module (313) can collect a data stream containing usage data (220) of the computing system (200). The collection module (313) can collect metric data and workload data without increasing the resources required for collection by dynamically programming communication data of each service workload at the kernel level.

[0066] The processing module (315) can create or update a data structure representing the network infrastructure based on the data collected by the collection module (313).

[0067] The processing module (315) may be configured to update the data structure, for example, whenever new data is collected from the computing system (200) or periodically. At this time, the processing module (315) may create a new node representing a new entity added to the network infrastructure.

[0068] Additionally, the processing module (315) can create or remove edges representing relationships between entities based on the analysis results of the collected data.

[0069] In addition, the processing module (315) includes an additional information integration module (3151) and a multidimensional edge determination module (3153), which can process additional edge information and integrate it into an existing data structure, and encode the corresponding edge information to determine a multidimensional edge type.

[0070] And the processing module (315) can generate event data including an improved data structure and store it in the database (320).

[0071] The monitoring tool (317) enables data structures representing relationships between entities to be visualized and output as a graph.

[0072] That is, as illustrated in FIG. 2, according to the present invention, communication data of each service workload can be dynamically programmed at the kernel level, thereby collecting metric data or workload data without increasing the resources required for collection.

[0073] And, according to the present invention, event data can be generated by executing a processing process that integrates additional information into the edges of the data structure to improve the data structure.

[0074] According to the present invention, a richer and more detailed expression of relationships and interactions between entities can be provided through an edge processing process.

[0075] More specifically, as illustrated in FIG. 3, a data structure representing network infrastructure can be generated based on the collected data related to each task. The data structure can be composed of a graph of nodes and edges. Nodes each represent an entity in the network infrastructure, and edges represent relationships between entities represented by nodes.

[0076] Nodes and edges may be created when the network infrastructure is initially set up by the data structure creation system (300), for example, automatically or manually by an administrator.

[0077] Additionally, the processing module (315) can add nodes representing newly added entities based on the collected data, and can add new edges representing newly discovered relationships between new entities or existing entities.

[0078] Additionally, the processing module (315) can integrate additional information by processing the relationships expressed between nodes, i.e., edges.

[0079] Figure 4 is an example of a multidimensional edge type through edge processing.

[0080] That is, information about traffic volume (high traffic volume), error rate (high error rate / low error rate), latency (high latency), encryption (segment encryption), and authentication mechanism can be additionally integrated into the edges that represent relationships between entities.

[0081] Additional information integrated for the basic edge can be expressed in a form utilizing two or more elements among the thickness of the edge (traffic volume), the color of the edge (error rate), the type of edge line as a solid line or a dotted line (latency), and a key (encryption) and lock (authentication) symbol, thereby implementing an improved edge shape.

[0082] Meanwhile, in Figure 4, as an example, the error rate is expressed as the density of points represented on the basic edge. Specifically, a high error rate is expressed as a high density of points, and a low error rate is expressed as a low density of points.

[0083] However, as described above, the error rate can also be expressed by the color of the edge, for example, a high error rate can be expressed in red and a low error rate in green, and the content is the same as that described in Korean Patent Application No. 10-2023-0178832, to which this application claims priority.

[0084]

[0085] Additionally, each edge type is set with a matching code for encoding, and in the drawing, for example, it is set as V10, E70, E10, L250, H1, O for traffic volume, error rate, latency, encryption, and authentication-related information, respectively.

[0086] Figure 5 is an example of a matching table between enhanced edge information representing additional information and the corresponding codes for encoding.

[0087] That is, it is an element that can be further integrated by processing the basic edge, and can include, for example, protocol type, payload type, packet size, traffic volume, error rate, latency, segment encryption, authentication mechanism, stable metric, redundancy check, and security record.

[0088] Protocol type describes the communication protocol used between entities, such as HTTP, FTP, and TCP. Payload type describes the type or nature of data transmitted between entities, including text, binary, and multimedia. Packet size refers to the size of packets exchanged between entities connected to a network, and traffic volume is quantitative data indicating the amount of data transmitted between entities.

[0089] Error rate refers to the frequency or rate of errors that can occur in communication or data transmission between entities, and latency refers to the time delay that occurs in communication or data transmission between two entities.

[0090] Segment encryption details whether communication or data transmission between entities is encrypted, and if so, what encryption method is used. Authentication mechanisms describe how entities authenticate each other during communication.

[0091] Safety measures the maximum deviation in packet transmission and reception latency over the previous reference period, while redundancy details the backup or redundant paths available for inter-entity communication. Security, on the other hand, refers to the record of all security incidents or breaches associated with inter-entity communication paths.

[0092] According to the present invention, an improved edge type can be expressed by processing an edge between entities and integrating additional information as described above, and a multidimensional edge type can be set by integrating a plurality of additional pieces of information.

[0093] The above multidimensional edge types can be encoded and stored through a code matching each edge type based on the above matching table.

[0094] Referring to FIG. 6 below, the process of processing edge information to determine a multidimensional edge type is described in more detail.

[0095] As illustrated, the additional information integration module (3151) can integrate additional information by processing edges between entities to express a multidimensional enhanced edge type.

[0096] Specifically, the edge between entity A and entity B can incorporate additional information about low error rate and low traffic volume, and the corresponding edge type can be represented as an edge with a low density of dots (low error rate) and thin thickness (low traffic volume).

[0097] At this time, as mentioned above, in order to indicate a low error rate, the low point density edge can be expressed as a green edge using color instead.

[0098] Additionally, additional information about low error rates and high traffic volumes can be integrated between entities B and C, and the corresponding edge types can be represented as thick (high traffic volume) and low point density (low error rates).

[0099] Similarly, to indicate a low error rate, edges with low point density may be represented using color, for example, green edges.

[0100] Additional information about encryption and authentication mechanisms can be integrated between entities B and E, and keys and locks can be represented as corresponding edge types.

[0101] Between Entities C and D, additional information about high error rates and medium traffic volumes can be incorporated, and edges with a high density of points (high error rates) of medium thickness (medium traffic volume) can be represented as corresponding edge types.

[0102] Additionally, to indicate a high error rate, color can be used instead of point density, and can be represented as a red edge, for example.

[0103] Additionally, the edge between entities C and F can incorporate additional information about high latency, and can be represented by a dotted edge with the corresponding edge type.

[0104] The multidimensional edge determination module (3153) can match codes according to the type of edge between each entity based on the described matching table, encode the enhanced edge type information, and store it in the event data DB (320).

[0105] For example, a multidimensional edge type between entities A and B as illustrated may be encoded and stored in a manner such as AB-P1_B2_V1_E10…, where the protocol type between entities A and B (AB) may be HTTP (P1), the payload type may be text (B1), the traffic volume may be low level (V1), and the error rate may be low (E10).

[0106] According to the present invention, when a client (100) requests, encoded information stored in an event data DB (320) can be visualized by a monitoring tool (317) and displayed through a user interface.

[0107] That is, according to the present invention, enhanced edge information for relationships between entities is encoded and stored as a multidimensional edge type, so that when a user requests, the enhanced edge type corresponding to each symbol can be matched and immediately visualized.

[0108] Therefore, entities and relationships between entities and changes in the network infrastructure can be reflected and visually expressed in real time, enabling administrators to monitor various systems in a large-scale network computing environment and respond immediately.

[0109] Therefore, administrators can visually check the traffic volume, error rate, or delay rate of a specific node at a glance, allowing them to immediately identify the problematic node when a failure occurs.

[0110] That is, as illustrated in FIG. 7, according to the present invention, for example, the traffic volume and error rate between each node can be expressed as a multidimensional edge type through the thickness of the edge and the density or color (not illustrated) of the points expressed on the edge.

[0111] Referring to FIG. 8 below, a method for creating a data structure according to one aspect of the present invention will be described.

[0112] The system (300) can first obtain entity data related to each task from the computing environment (S100).

[0113] The system (300) can analyze usage data (220) generated by a computing environment system (200) that references the entity, and generate a data structure representing the relationship between the entities.

[0114] The system (300) can configure the above data structure into nodes and edges, where each node represents an entity of the network infrastructure, and each edge represents a relationship between entities represented by nodes.

[0115] Nodes and edges may be initially created by the system (300) when the network infrastructure is initially set up, or may be created automatically or manually by an administrator.

[0116] At this time, the system (300) can process additional information about the edges between each entity (S101).

[0117] That is, the system (300) can process enhanced edge information by integrating additional information about relationships between entities into existing data structures. The additional information may include one or more of traffic volume, error rate, latency, password, and authentication information between entities, as described above (S103).

[0118] Next, the system (300) can encode the edge type by matching a corresponding code for each enhanced edge type (S105).

[0119] And the system (300) can determine a multidimensional edge type by integrating multiple additional information for each edge (S107).

[0120] The system (300) can check whether the enhanced edge details relationships and interactions between entities (S109) and generate event data that conforms to the enhanced data structure (S111).

[0121] FIG. 9 is a drawing illustrating a process of visualizing and outputting a data structure according to a user request, according to one aspect of the present invention.

[0122] The system (300) can receive a query for network infrastructure from a client (100) (S200).

[0123] The system (300) can search the stored data structure and select nodes and edges related to the requested network infrastructure (S203).

[0124] At this time, the system (300) can check the code according to the corresponding multidimensional edge type at each edge (S205).

[0125] The following system (300) can provide a plurality of additional information in an integrated manner by identifying an enhanced edge type matching each code based on a table, for example (S207).

[0126] For example, as described above, a multidimensional edge type between entities A and B can be encoded and stored as AB-P1_B2_V1_E10. Then, the system (300) can represent the edge between nodes A and B as a low-density (or green) edge type with thin dots indicating low traffic volume and low error rate based on the code.

[0127] Therefore, according to the present invention, enhanced edge information regarding relationships between entities is encoded and stored as multidimensional edge types. Therefore, upon user request, the corresponding multidimensional enhanced edge type can be matched and immediately visualized. Furthermore, administrators can efficiently monitor and promptly respond to various systems in a large-scale network computing environment.

[0128] The embodiments of the present disclosure described above are not implemented only through devices and methods, but may also be implemented through a program that realizes a function corresponding to the configuration of the embodiments of the present disclosure or a recording medium on which the program is recorded.

[0129] Although the embodiments of the present disclosure have been described in detail above, the scope of the present disclosure is not limited thereto, and various modifications and improvements made by those skilled in the art using the basic concepts of the present disclosure defined in the following claims also fall within the scope of the present disclosure.

[0130] [Explanation of symbols]

[0131] 100: Client

[0132] 200: Computing Systems

[0133] 210: Computing Server

[0134] 220: Usage data

[0135] 300: Data Structure Generation System

[0136] 310: Data Structure Generation Server

[0137] 311: Response Module

[0138] 313: Collection Module

[0139] 315: Reinforcement Module

[0140] 317: Monitoring Tool

[0141] 320: Event data

[0142] 3151: Additional Information Integration Module

[0143] 3153: Multidimensional Edge Decision Module

Claims

1. As a data structure creation system, A data structure generation server that generates a data structure representing entities and relationships between entities in a network infrastructure as nodes and edges based on data collected in a computing environment, processes the edges to integrate edge additional information, and determines multidimensional edge types between nodes; and A system comprising an event data DB storing the above data structure information.

2. In paragraph 1, The above data structure generation server, A collection module that collects data streams containing usage data generated from network infrastructure; and A system comprising a processing module for generating a data structure represented by nodes and edges based on collected data, processing the edges to integrate two or more additional pieces of information about relationships between entities, and determining multidimensional enhanced edge types between nodes.

3. In paragraph 2, The above processing module, A system that encodes the enhanced edge type of each edge through a code matching each of the enhanced edge types and stores the encoded edge type in the event data DB.

4. In paragraph 3, The above processing module, An additional information integration module that integrates two or more additional pieces of information about relationships between entities by processing the above edges; and A system comprising a multi-dimensional edge decision module for encoding an enhanced edge type generated through two or more additional information processing and determining a multi-dimensional enhanced edge type.

5. In paragraph 4, A system further comprising a monitoring tool for visualizing encoded multidimensional enhanced edge types and displaying them through a user interface of a client device.

6. In paragraph 5, The above monitoring tool is a system that visualizes an enhanced multidimensional edge type encoded by utilizing two or more elements among edge thickness, density of points within the edge, edge color, edge line type, key, and lock symbol.

7. In paragraph 6, Further comprising a response module for processing requests to the network infrastructure of the client device; The above monitoring tool, upon request, A system that matches the enhanced edge type corresponding to the stored symbol with respect to the data structure of the corresponding nodes and edges and immediately outputs it visually.

8. In any one of paragraphs 1 to 7 The above additional information is A system comprising one or more of traffic volume, error rate, latency, encryption, authentication, protocol type, payload type, packet size, reliability, redundancy, and security.

9. In paragraph 8, Data collection for data structure creation is A system that runs without increasing the resources required for collection by dynamically programming communication data for each service workload at the kernel level.

10. As a method of creating a data structure of the system, A step of generating a data structure representing entities and relationships between entities within a network infrastructure as nodes and edges based on data collected in a computing environment; A step of processing the above edge to integrate additional edge information and generate enhanced edge information; and A method comprising the step of determining a multidimensional enhanced edge type by integrating multiple additional information for each edge.

11. In paragraph 10, The step of determining the above multidimensional enhanced edge type is: A step of processing the above edge to integrate two or more additional pieces of information about the relationship between entities; and A method comprising the steps of encoding an enhanced edge type generated through two or more additional information processing and determining a multi-dimensional enhanced edge type.

12. In paragraph 11, After the step of determining the multidimensional enhanced edge type, A method further comprising the step of generating and storing event data conforming to an enhanced data structure.

13. In paragraph 12, A method further comprising the step of visualizing the encoded multidimensional enhanced edge type and displaying it through a user interface of a client device.

14. In paragraph 13, The above visualization is, A method for visualizing an enhanced multidimensional edge type encoded by utilizing two or more elements among edge thickness, density of points within an edge, edge color, edge line type, key, and lock symbol.

15. In paragraph 14, The steps to make the above appear are: A step of receiving a request for the network infrastructure of the client device; and A method comprising: a step of visually outputting an enhanced edge type corresponding to a stored symbol in relation to a data structure of the corresponding nodes and edges; 16. In any one of paragraphs 10 to 15, The above additional information is A method comprising one or more of traffic volume, error rate, latency, encryption, authentication, protocol type, payload type, packet size, reliability, redundancy, and security.

17. In paragraph 16, A method further comprising a step of dynamically programming communication data of each service workload at the kernel level to generate a data structure, thereby collecting data from a computing environment without increasing resources required for collection.

Images