1. A computer-implemented method for characterizing execution paths, comprising: identifying execution paths of at least one application, the execution paths are responsive to receipt by the at least one application of messages; responsive to the identifying, calculating metrics which represent distances between the execution paths; grouping the execution paths according to the metrics into a plurality of groups of execution paths; and responsive to the grouping of the execution paths, grouping the messages into a plurality of groups of messages.