Methods and apparatus for dependency-based impact simulation and vulnerability analysis

• US 20040049372A1
• Filed: 09/11/2002
• Published: 03/11/2004
• Est. Priority Date: 09/11/2002
• Status: Active Grant

• Current Assignee: Trend Micro Inc.
• Original Assignee: International Business Machines Corporation
• Inventors: Keller, Alexander
• Granted Patent: US 7,334,222 B2
• Time in Patent Office: Days
• US Class Current: 703/22
• CPC Class Codes: H04L 41/06 Management of faults, events, alarms or notifications
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 41/5003 Managing SLA; Interaction between SLA and QoS
• CPC Class Codes: H04L 41/5012 determining service availability, e.g. which services are available at a certain point in time
• CPC Class Codes: H04L 43/091 Measuring contribution of individual network components to actual service level

Abstract

A technique for determining a potential impact of a simulated condition of at least one subject component associated with a computing environment comprises the following steps/operations. First, one or more components in the computing environment which depend on the at least one subject component are identified and a potential condition status associated with each of the one or more identified components is determined. Then, information is presented to a user with respect to at least a portion of the one or more identified components based on the corresponding condition status. By way of example, the inventive techniques may be applied to a distributed computing environment. The computing environment may also be an autonomic computing environment.

Claims

1. A computer-based method for determining a potential impact of a simulated condition of at least one subject component associated with a computing environment, the method comprising the steps of:

identifying one or more components in the computing environment which depend on the at least one subject component and determining a potential condition status associated with each of the one or more identified components; and

presenting information to a user with respect to at least a portion of the one or more identified components based on the corresponding condition status.

2. The method of claim 1, wherein the computing environment comprises a distributed computing environment.

3. The method of claim 1, wherein the computing environment comprises an autonomic computing environment.

4. The method of claim 1, wherein the information presented to the user comprises a representation of a vulnerability associated with at least a portion of the one or more identified components based on the corresponding condition status.

5. The method of claim 4, wherein the representation comprises a vulnerability map indicating a respective likelihood of failure associated with each of the one or more identified components.

6. The method of claim 1, wherein the information presented to the user comprises at least one of a list of potentially affected end-users, a list of potentially affected components and a list of potentially affected hosts.

7. The method of claim 1, wherein the information presented to the user comprises a comparison of one determination of the potential impact of the simulated condition of the at least one subject component to at least one other determination of the potential impact of the simulated condition of the at least one subject component, such that the user is able to verify whether one or more steps taken, between the one determination and the at least one other determination, to at least minimize the potential impact are substantially effective.

8. The method of claim 1, wherein the at least one subject component is an existing component in the computing environment.

9. The method of claim 1, wherein the at least one subject component is not an existing component in the computing environment.

10. The method of claim 1, wherein the identifying step further comprises traversing at least a portion of a model representative of an existence of one or more relationships associated with at least a portion of components of the computing environment and which is capable of accounting for a full lifecycle associated with at least one component of the computing environment.

11. The method of claim 10, wherein the model is in a form comprising a functional categorization, a structural categorization and an operational categorization.

12. The method of claim 11, wherein the identifying step further comprises computing the operational categorization of the model based on at least one input criterion and traversing the operational categorization to identify the one or more components in the computing environment which depend on the at least one subject component.

13. The method of claim 12, wherein the at least one input criterion comprises at least one of a name of the at least one subject component, a host associated with the at least one subject component, a direction of the traversal, a depth of the traversal, a path of the traversal and at least one filtering criterion.

14. The method of claim 1, wherein the condition of the at least one subject component is one of failed, not failed and degraded.

15. The method of claim 1, wherein a component is one of a service, an application, middleware, hardware, a device driver, an operating system and a system associated with the computing environment.

16. Apparatus for determining a potential impact of a simulated condition of at least one subject component associated with a computing environment, the apparatus comprising:

at least one processor operative to;

(i) identify one or more components in the computing environment which depend on the at least one subject component and determine a potential condition status associated with each of the one or more identified components; and

(ii) cause the presentation of information to a user with respect to at least a portion of the one or more identified components based on the corresponding condition status; and

memory, coupled to the at least one processor, operative to store at least a portion of results associated with the identifying and presenting operations.

17. The apparatus of claim 16, wherein the computing environment comprises a distributed computing environment.

18. The apparatus of claim 16, wherein the computing environment comprises an autonomic computing environment.

19. The apparatus of claim 16, wherein the information presented to the user comprises a representation of a vulnerability associated with at least a portion of the one or more identified components based on the corresponding condition status.

20. The apparatus of claim 19, wherein the representation comprises a vulnerability map indicating a respective likelihood of failure associated with each of the one or more identified components.

21. The apparatus of claim 16, wherein the information presented to the user comprises at least one of a list of potentially affected end-users, a list of potentially affected components and a list of potentially affected hosts.

22. The apparatus of claim 16, wherein the information presented to the user comprises a comparison of one determination of the potential impact of the simulated condition of the at least one subject component to at least one other determination of the potential impact of the simulated condition of the at least one subject component, such that the user is able to verify whether one or more steps taken, between the one determination and the at least one other determination, to at least minimize the potential impact are substantially effective.

23. The apparatus of claim 16, wherein the at least one subject component is an existing component in the computing environment.

24. The apparatus of claim 16, wherein the at least one subject component is not an existing component in the computing environment.

25. The apparatus of claim 16, wherein the identifying operation further comprises traversing at least a portion of a model representative of an existence of one or more relationships associated with at least a portion of components of the computing environment and which is capable of accounting for a full lifecycle associated with at least one component of the computing environment.

26. The apparatus of claim 25, wherein the model is in a form comprising a functional categorization, a structural categorization and an operational categorization.

27. The apparatus of claim 26, wherein the identifying operation further comprises computing the operational categorization of the model based on at least one input criterion and traversing the operational categorization to identify the one or more components in the computing environment which depend on the at least one subject component.

28. The apparatus of claim 27, wherein the at least one input criterion comprises at least one of a name of the at least one subject component, a host associated with the at least one subject component, a direction of the traversal, a depth of the traversal, a path of the traversal and at least one filtering criterion.

29. The apparatus of claim 16, wherein the condition of the at least one subject component is one of failed, not failed and degraded.

30. An article of manufacture for determining a potential impact of a simulated condition of at least one subject component associated with a computing environment, comprising a machine readable medium containing one or more programs which when executed implement the steps of:

identifying one or more components in the computing environment which depend on the at least one subject component and determining a potential condition status associated with each of the one or more identified components; and

presenting information to a user with respect to at least a portion of the one or more identified components based on the corresponding condition status.