Anomaly Detection for Application Infrastructure Using Machine Learning Models
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Application infrastructure components often experience performance degradations over time, making it desirable to detect anomalies before total failure occurs, but existing technologies lack effective automated anomaly detection methods.
Innovation Solution
A computer system is developed that includes memory hardware to store machine learning models and historical performance metrics, and processor hardware to execute instructions for training these models. The system processes measured performance metrics using a density function machine learning model and a random forest regressor model to generate component health status and health score outputs, which are then displayed in a multi-level application monitoring interface.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If machine learning models are implemented for automated anomaly detection, then detection accuracy is improved, but system complexity increases
Solution Approach 1:
The system segments the anomaly detection task into multiple specialized machine learning models, each trained on specific performance metrics (CPU utilization, memory utilization, response time, volume). This segmentation allows each model to focus on particular aspects of component behavior, improving detection accuracy while organizing complexity into manageable modular units that can be independently trained and deployed.
Solution Approach 2:
The patent introduces an intermediary layer between raw performance metrics and anomaly detection results. Machine learning models serve as intermediaries that process and interpret complex performance data, transforming raw metrics into meaningful anomaly detections. This intermediary layer handles the complexity internally while presenting simplified detection results to users.
2Reliability
If multiple machine learning models are trained and deployed, then detection reliability is improved, but computational resource consumption increases
Solution Approach 1:
The system performs preliminary action by training multiple machine learning models in advance on historical performance data. These pre-trained models are then deployed to make real-time anomaly detections without requiring extensive computational resources during operation. The heavy computational work is done beforehand, allowing reliable multi-model detection with lower runtime resource consumption.
Solution Approach 2:
The patent employs partial action by using multiple specialized models rather than one comprehensive model. Each model processes specific metrics partially, and their results are combined. This approach achieves reliable detection through the collective partial contributions of multiple models while optimizing resource usage compared to a single exhaustive model.
Data Source
AI summary
A system for automated detection of anomalous performance of application infrastructure components includes memory hardware and processor hardware communicatively coupled together. The processor hardware is configured to train the at least one machine learning model using measured historical performance metrics of a first component of the application infrastructure components. The processor hardware is configured to use the at least one machine learning model to generate key performance indicators for the first component, based on a reporting window time period associated with measured performance metrics. The processor hardware is configured to, in response to the key performance indicators indicating a performance anomaly condition for the first component, automatically perform a self-healing operation associated with the key performance indicators. The self-healing operation includes automatically modifying operation of the first component, including at least one of restarting the first component, and starting a new instance of the first component.


