Abstract: A method includes performing, by a processor: monitoring a first entity, where monitoring the first entity includes collecting performance information corresponding to the first entity for one or more performance metrics, monitoring a second entity, where monitoring the second entity includes collecting performance information corresponding to the second entity for the one or more performance metrics, determining difference(s) between the performance information corresponding to the first entity for the one or more performance metrics and the performance information corresponding to the second entity for the one or more performance metrics, comparing the difference(s) with one or more performance thresholds, and determining whether the first entity and the second entity are a same entity based on comparing the difference(s) with the performance threshold(s).