Method, device and storage medium for determining health state of information system

• US 10,303,577 B2
• Filed: 06/22/2018
• Issued: 05/28/2019
• Est. Priority Date: 08/07/2013
• Status: Active Grant

• Current Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Inventors: Zhou, Bin, Xu, Dong Shan, Fu, Shan Yang
• Primary Examiner(s): Naghdali, Khalil
• Application Number:
  US16/016,185
• Publication Number:
  US 20180302428A1
• Time in Patent Office: 340 Days
• Field of Search: 726 22
• CPC Class Codes: G06F 11/3452 Performance evaluation by statistical analysis
• CPC Class Codes: H04L 63/1433 Vulnerability analysis

Abstract

The present disclosure relates to a method, a device and a storage medium for determining a health state of an information system. At first, a baseline configuration document corresponding to the information system is received, and data records under inspection of the information system are acquired. The baseline configuration document defines baselines. Then, each of the data records under inspection is compared with at least one baseline defined in the baseline configuration document to obtain a comparing result between each of the data records under inspection and the at least one baseline. At last, the health state of the information system is determined according to the comparing result between each of the data records under inspection and the at least one baseline. A health-determining apparatus relative to the above-mentioned method is also provided.

Claims

1. A method for determining a health state of an information system in a computer, the computer comprising a processor operating in conjunction with a memory, the method comprising:

receiving, by the processor, a baseline configuration document corresponding to the information system and acquiring data records under inspection of the information system, the baseline configuration document defining a plurality of baselines;

comparing, by the processor, each of the data records under inspection with at least one baseline defined in the baseline configuration document to obtain a comparing result between each of the data records under inspection and the at least one baseline; and

determining, by the processor, a health state of the information system according to the comparing result between each of the data records under inspection and the at least one baseline;

wherein the determining the health state of the information system comprises;

classifying the baselines into a plurality of types according to risk levels of the baselines, each type of the baselines corresponding to a predetermined factor, the comparing result including a number of matched baselines relative to the data records under inspection in each type;

obtaining parameters of a formula of health state according to the number of the matched baselines relative to the data records under inspection in each type and each corresponding factor; and

calculating the health state of the information system according to the parameters and the formula of health state;

wherein the baselines are classified into n types according to the risk levels of the baselines, the formula of health state being;

2. The method according to claim 1, further comprising:

associating each information system with a baseline configuration document; and

receiving the baseline configuration document associated with the information system under inspection.

3. The method according to claim 1, wherein each of the baselines is a predetermined standard preventing the information system from insecurity or damage.

4. The method of claim 1, further comprising:

transmitting the health state to the information system for viewing or monitoring via the information system.

5. A device for determining a health state of an information system in a computer, the device comprises a processor operating in conjunction with a memory storing program codes, wherein the processor is configured to execute the stored program codes to:

receive a baseline configuration document corresponding to the information system and acquire data records under inspection of the information system, the baseline configuration document defining a plurality of baselines;

compare each of the data records under inspection with at least one baseline defined in the baseline configuration document to obtain a comparing result between each of the data records under inspection and the at least one baseline; and

determine a health state of the information system according to the comparing result between each of the data records under inspection and the at least one baseline;

wherein the processor is further configured to execute the stored program codes to;

classify the baselines into a plurality of types according to risk levels of the baselines, each type of the baselines corresponding to a predetermined factor, the comparing result including a number of matched baselines relative to the data records under inspection in each type;

obtain parameters of a formula of health state according to the number of the matched baselines relative to the data records under inspection in each type and each corresponding factor; and

calculate the health state of the information system according to the parameters and the formula of health state;

wherein the baselines are classified into n types according to the risk levels of the baselines, the formula of health state being;

6. The device according to claim 5, wherein the processor is further configured to execute the program codes to associate each information system with a baseline configuration document, and wherein the processor is further configured to execute the program codes to receive the baseline configuration associated with the information system under inspection.

7. The device according to claim 5, wherein each of the baselines is a predetermined standard preventing the information system from insecurity or damage.

8. The device according to claim 5, wherein the processor is further configured to execute the program codes to transmit the health state of the information system to the information system.

9. A non-transitory computer-readable storage medium storing instructions for optimizing an information system in a computer, the computer comprising a processor operating in conjunction with a memory, the instructions, when executed by the processor, causing the processor to perform operations comprising:

receiving a baseline configuration document corresponding to the information system and acquiring data records under inspection of the information system, the baseline configuration document defining a plurality of baselines;

comparing each of the data records under inspection with at least one baseline defined in the baseline configuration document to obtain a comparing result between each of the data records under inspection and the at least one baseline; and

determining a health state of the information system according to the comparing result between each of the data records under inspection and the at least one baseline;

wherein the determining the health state of the information system comprises sub-steps of;

classifying the baselines into a plurality of types according to risk levels of the baselines, each type of the baselines corresponding to a predetermined factor, the comparing result including a number of matched baselines relative to the data records under inspection in each type;

obtaining parameters of a formula of health state according to the number of the matched baselines relative to the data records under inspection in each type and each corresponding factor; and

calculating the health state of the information system according to the parameters and the formula of health state;

wherein the baselines are classified into n types according to the risk levels of the baselines, the formula of health state being;

10. The computer-readable storage medium as claimed in claim 9, wherein the operations further comprise:

associating each information system with a baseline configuration document; and

receiving the baseline configuration document associated with the information system under inspection.

11. The computer-readable storage medium as claimed in claim 9, wherein each of the baselines is a predetermined standard preventing the information system from insecurity or damage.