Anomaly Detection for Application Infrastructure Using Machine Learning Models

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Application infrastructure components often experience performance degradations over time, making it desirable to detect anomalies before total failure occurs, but existing technologies lack effective automated anomaly detection methods.

Innovation Solution

A computer system is developed that includes memory hardware to store machine learning models and historical performance metrics, and processor hardware to execute instructions for training these models. The system processes measured performance metrics using a density function machine learning model and a random forest regressor model to generate component health status and health score outputs, which are then displayed in a multi-level application monitoring interface.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If machine learning models are implemented for automated anomaly detection, then detection accuracy is improved, but system complexity increases

Engineering Contradiction:
Improveanomaly detection accuracyVSAvoidsystem complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The system segments the anomaly detection task into multiple specialized machine learning models, each trained on specific performance metrics (CPU utilization, memory utilization, response time, volume). This segmentation allows each model to focus on particular aspects of component behavior, improving detection accuracy while organizing complexity into manageable modular units that can be independently trained and deployed.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary layer between raw performance metrics and anomaly detection results. Machine learning models serve as intermediaries that process and interpret complex performance data, transforming raw metrics into meaningful anomaly detections. This intermediary layer handles the complexity internally while presenting simplified detection results to users.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If multiple machine learning models are trained and deployed, then detection reliability is improved, but computational resource consumption increases

Engineering Contradiction:
Improvedetection reliabilityVSAvoidcomputational resource consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The system performs preliminary action by training multiple machine learning models in advance on historical performance data. These pre-trained models are then deployed to make real-time anomaly detections without requiring extensive computational resources during operation. The heavy computational work is done beforehand, allowing reliable multi-model detection with lower runtime resource consumption.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent employs partial action by using multiple specialized models rather than one comprehensive model. Each model processes specific metrics partially, and their results are combined. This approach achieves reliable detection through the collective partial contributions of multiple models while optimizing resource usage compared to a single exhaustive model.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS12332762B2Machine learning models for automated anomaly detection for application infrastructure components
Publication Date: 2025.06.17 EXPRESS SCRIPTS STRATEGIC DEVELOPMENT INC
  • US12332762B2 patent drawing
  • US12332762B2 patent drawing
  • US12332762B2 patent drawing

AI summary

A system for automated detection of anomalous performance of application infrastructure components includes memory hardware and processor hardware communicatively coupled together. The processor hardware is configured to train the at least one machine learning model using measured historical performance metrics of a first component of the application infrastructure components. The processor hardware is configured to use the at least one machine learning model to generate key performance indicators for the first component, based on a reporting window time period associated with measured performance metrics. The processor hardware is configured to, in response to the key performance indicators indicating a performance anomaly condition for the first component, automatically perform a self-healing operation associated with the key performance indicators. The self-healing operation includes automatically modifying operation of the first component, including at least one of restarting the first component, and starting a new instance of the first component.