| CPC H04L 41/0631 (2013.01) [H04L 41/0627 (2013.01); H04L 41/16 (2013.01)] | 20 Claims | 

| 
               1. A method for managing a network using a behavior model, comprising: 
            identifying, by one or more processors, current network metadata that matches test network metadata; 
                computing, by the one or more processors, a plurality of network events based on possible transitions to the current network metadata; 
                identifying, by the one or more processors, a root cause of a problem in the network based on the plurality of network events; and 
                outputting, by the one or more processors, instructions based on the root cause. 
               |