Conformance authority reconciliation

• US 10,318,894 B2
• Filed: 08/16/2005
• Issued: 06/11/2019
• Est. Priority Date: 08/16/2005
• Status: Active Grant

• Current Assignee: Tripwire Incorporated (Belden Inc.)
• Original Assignee: Tripwire Incorporated (Belden Inc.)
• Inventors: DiFalco, Robert A., Keeler, Kenneth L., Warmack, Robert L.
• Primary Examiner(s): Richardson, James E
• Application Number:
  US11/205,586
• Publication Number:
  US 20070043786A1
• Time in Patent Office: 5,047 Days
• Field of Search: 707691, 707616, 707634, 707649, 707638, 707639
• CPC Class Codes: G06F 16/128 Details of file system snapshots on the file-level, e.g. snapshot creation, administration, deletion use of snapshots for error detection or correction G06F11/14, G06F11/16
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: H04L 41/0866 Checking the configuration

Abstract

An automated method for facilitating management of a data processing environment is disclosed. In various embodiments, the method may include facilitating detecting of a change to an element of a data processing device of the data processing environment. In various embodiments, the method may further include facilitating reconciling the change with a conformance authority, the conformance authority having one or more guidelines. Other embodiments of the present invention may include, but are not limited to, apparatuses adapted to facilitate practice of the above-described method.

Claims

1. An automated, computer-implemented method for facilitating management of a data processing environment, the method comprising:

by a change detection agent, detecting a change to an element of a data processing device of the data processing environment by comparing a state of the data processing device to a baseline state of the data processing device;

separately from the detecting the change and also by the change detection agent, determining whether the detected change violates one or more guidelines of a conformance authority;

responsive to determining that the detected change violates at least one of the guidelines, performing one or more responses;

responsive to determining that the detected change does not violate the at least one of the guidelines, changing the baseline state to incorporate the change;

reporting the detected change together with a performance parameter of the data processing device; and

changing the one or more guidelines used by the change detection agent based on the reported performance parameter.

2. The method of claim 1, further comprising, by the change detection agent, determining whether the one or more guidelines of the conformance authority relates to at least a subset of the element where the detected change was detected.

3. The method of claim 1, further comprising determining one or more users associated with the detected change.

4. The method of claim 1, wherein the data processing device is a device selected from the group consisting of a networking device, a server, a desktop computer, a laptop computer, a tablet computer, a personal digital assistant, a cellular phone, a set top box, and a media player.

5. The method of claim 1, wherein the method maintains or demonstrates control of one or more selected from the group consisting of an enterprise'"'"'s information technology infrastructure, an enterprise'"'"'s financial systems, an enterprise'"'"'s financial data and an enterprise'"'"'s business processes.

6. The method of claim 1, wherein the method is part of an audit of an enterprise and provides an audit trail for the audit.

7. The method of claim 1, wherein the one or more guidelines specify multiple conforming values for the element.

8. The method of claim 7, wherein the one or more guidelines specify a search for an expression that should not exist in the element.

9. The method of claim 1, wherein the one or more responses include modifying a severity state of the change detected.

10. The method of claim 1, wherein the conformance authority also has device start-up configuration guidelines, and wherein the method further comprises:

detecting a start-up configuration change to a second element of the data processing device; and

in response to detecting the start-up configuration change, determining if the start-up configuration change violates at least one of the device start-up configuration guidelines.

11. The method of claim 1, wherein the one or more responses comprises reverting the element of the data processing device to the baseline state.

12. The method of claim 1, wherein the one or more guidelines of the conformance authority are a subset of guidelines from the conformance authority specific for the data processing device.

13. The method of claim 1, wherein the conformance authority is a policy-based management tool separate from the change detection agent.

14. The method of claim 1, wherein the change detection agent is a dedicated change detection agent for the data processing device and performs the detecting, determining, performing, and changing only for the data processing device and not for any other data processing device in the data processing environment.

15. The method of claim 1, wherein the reported performance parameter represents a number of transactions per time period processed or network outages.

16. One or more non-transitory computer-readable storage media storing instructions that, when executed by a computer, cause the computer to perform a method, the method comprising:

by a change detection agent, detecting a change to an element of a data processing device of a data processing environment by comparing a state of the data processing device to a baseline state of the data processing device;

separately from the detecting the change and also by the change detection agent, determining whether the detected change violates one or more guidelines of a conformance authority;

responsive to determining that the detected change violates at least one of the guidelines, performing one or more responses;

responsive to determining that the detected change does not violate the at least one of the guidelines,

changing the baseline state to incorporate the detected change;

reporting the detected change together with a performance parameter of the data processing device; and

changing the one or more guidelines used by the change detection agent based on the reported performance parameter.

17. The media of claim 16, wherein the one or more responses include an alert response.

18. The media of claim 16, wherein the method maintains or demonstrates control of one or more selected from the group consisting of an enterprise'"'"'s information technology infrastructure, an enterprise'"'"'s financial systems, an enterprise'"'"'s financial data and an enterprise'"'"'s business processes.

19. The media of claim 16, wherein the one or more guidelines specify multiple conforming values for the element.

20. The media of claim 19, wherein the one or more guidelines specify a search for an expression that should not exist in the element.

21. The media of claim 19, wherein the change detection agent is a dedicated change detection agent for the data processing device and performs the detecting, determining, performing, and changing only for the data processing device and not for any other data processing device in the data processing environment.

22. The media of claim 19, wherein the reported performance parameter represents a number of transactions per time period processed or network outages.

23. The media of claim 16, wherein the one or more responses include modifying a severity state of the change detected.

24. The media of claim16, wherein the one or more guidelines include a device start-up configuration guideline that specifies a time-to-live (TTL) parameter.

25. The media of claim 16, wherein the one or more responses comprises reverting the element of the data processing device to the baseline state.

26. The media of claim 16, wherein the one or more guidelines of the conformance authority are a subset of guidelines from the conformance authority specific for the data processing device.

27. The media of claim 16, wherein the conformance authority is a policy-based management tool separate from the change detection agent.