Han, Xueyuan MichaelPasquier, ThomasRanjan, TanviGoldstein, MarkSeltzer, Margo2018-04-092017Han, Xueyuan, Thomas Pasquier, Tanvi Ranjan, Mark Goldstein, and Margo Seltzer. 2017. FRAPpuccino: Fault-detection through Runtime Analysis of Provenance. In Workshop Programs of Hotcloud '17: 9th USENIX Workshop on Hot Topics in Cloud Computing, Santa Clara, CA, July 10-11, 2017.http://nrs.harvard.edu/urn-3:HUL.InstRepos:35350572We present FRAPpuccino (or FRAP), a provenance- based fault detection mechanism for Platform as a Ser- vice (PaaS) users, who run many instances of an appli- cation on a large cluster of machines. FRAP models, records, and analyzes the behavior of an application and its impact on the system as a directed acyclic provenance graph. It assumes that most instances behave normally and uses their behavior to construct a model of legitimate behavior. Given a model of legitimate behavior, FRAP uses a dynamic sliding window algorithm to compare a new instance’s execution to that of the model. Any in- stance that does not conform to the model is identified as an anomaly. We present the FRAP prototype and ex- perimental results showing that it can accurately detect application anomalies.en-USConference Paper2017-12-0720172018-04-09