| 摘要 |
An apparatus, system, and method are provided for associating resources using a time based algorithm. The apparatus comprises an initialization module, a query module, and a resource time module. The initialization module receives a seed identifier that identifies a seed resource. The seed resource may be a data file, an executable file, a directory, or another data structure associated with a logical application or business process. The query module accesses trace data and searches the trace data for a candidate resource that might be linked to the seed resource. The trace data describes a plurality of resource events that occur on a computer or network system. The resource time module selects a candidate resource based on a similar time attribute recorded in the trace data. The similar time attribute may refer to an access time of the candidate resource that is similar to, such as within a time range, an access time of a seed resource or otherwise linked resource. Based on the similar time attribute, the candidate resource may be associated or linked with the seed resource. Together the seed resource and one or more linked resources may form a resource group, which may be associated with a particular logical application or business process.
|
