14-12-2017 дата публикации
Номер: US20170357524A1
A system uses agents to monitor a distributed business transaction as well as monitor changes in software configuration. An agent may detect a file load, such a class load, obtain portions of the file such as functions, and perform a hash on the byte code functions. A hash tree may then be constructed and compared to previous states of the system. The hash tree may be generated, for example, at each file loading detected, so that system states can be compared. Differences in hash trees are detected and the changes are reported to an administrator of the system that provides the distrusted business transaction. 1. (canceled)2. A method , comprising:detecting, by an agent at runtime, loading of a file in an application, the application being one of a plurality of applications that provide a distributed business transaction;responsive to the detecting, identifying, by the agent, parts of the loaded file;performing, by the agent, a hash of the parts of the loaded file to generate corresponding hash values;constructing, by the agent, a hash tree from the generated hash values;determining, by the agent, whether a previously constructed hash tree from a previously detected load of the file is available to perform a comparison;comparing, by the agent, the constructed hash tree against the previously constructed hash tree to identify changes to blocks of code inside the loaded file, wherein the identified changes indicate a change in the distributed business transaction; andreporting, by the agent, results of the comparison.3. The method of claim 2 , wherein the parts include functions and data claim 2 , and wherein the hash is performed on the functions.4. The method of claim 2 , wherein the parts include portions of a configuration file.5. The method of claim 2 , wherein the hash tree is a Merkle tree.6. The method of claim 2 , wherein the agents constructs a new hash tree in response to detection of each loading of a given file.7. A non-transitory computer-readable ...
Подробнее