METHOD FOR FORECASTING RISKS ASSOCIATED WITH SOFTWARE PACKAGES

• US 20080134145A1
• Filed: 12/04/2006
• Published: 06/05/2008
• Est. Priority Date: 12/04/2006
• Status: Active Grant

• Current Assignee: LinkedIn Corporation (Microsoft Corporation)
• Original Assignee: International Business Machines Corporation
• Inventors: Ratliff, Emily Jane, Kirkland, Dustin C., Halcrow, Michael Austin, Hall, Kylene Jo
• Granted Patent: US 7,793,114 B2
• Time in Patent Office: Days
• US Class Current: 717/124
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

A computer implemented method, a computer program product, and a data processing system are provided for forecasting risks associated with installing software packages. A software package is selected for installation on a data processing system. The number of updates issued for each software package within the package list is determined within a specified past period of time. Based on the number of updates for the package list over the past period of time, an estimate of the number of updates likely to be issued over a specified future period of time is calculated. The number of updates estimated over the future period of time is an indicator of the risk associated with the installation of software packages on the package list.

Claims

1. A computer implemented method for forecasting risk, the computer implemented method comprising:

selecting a software package to install on a data processing system;

specifying a past period of time;

calculating a past number of updates issued for the software package within the past period of time;

specifying a future period of time; and

estimating a future number of updates expected to be issued within the future period of time.

2. The computer implemented method of claim 1, wherein the software package is one of a plurality of software packages in a package list, and wherein the future number of updates is a total of future number of updates estimated to be issued within the future period of time for each software package in the package list.

3. The computer implemented method of claim 1, wherein the future number of updates is used for calculating a risk associated with installing the software package to form a package risk, and wherein the package risk is a probabilistic measure of a risk to the data processing system from installing the future number of updates.

4. The computer implemented method of claim 3, further comprising:

identifying an indicator about the package, wherein the indicator is one of a code quality indicator, and a security information indicator; and

using the indicator in calculating the risk factor.

5. The computer implemented method of claim 1, wherein the calculating the future number of updates comprises:

identifying a set of random points in time in the past period of time;

identifying the past number of updates issued at each of the random points in time in the set of random points in time, to form a set of past issued updates;

extrapolating from the set of past issued updates to forecast the future number of updates estimated to be issued within the future period of time.

6. The computer implemented method of claim 1, wherein the calculating the future number of updates comprises:

identifying a set of random points in time in the past period of time;

identifying a past number of updates installed at each of the random points in time in the set of random points in time, to form a set of past installed updates;

extrapolating from the set of past installed updates to forecast the future number of updates estimated to be issued within the future period of time.

7. The computer implemented method of claim 1, wherein the future number of updates estimated to be issued within the future period of time is a probabilistic estimate.

8. A computer implemented method of claim 1, wherein the estimating step comprises:

predicting a likelihood that the future period of time will end with zero updates.

9. A computer program product comprising a computer usable medium including computer usable code for forecasting risk, the computer program product comprising:

computer usable code for selecting a software package to install on a data processing system;

computer usable code for specifying a past period of time;

computer usable code for calculating a past number of updates issued for the software package within the past period of time;

computer usable code for specifying a future period of time; and

computer usable code for estimating a future number of updates expected to be issued within the future period of time.

10. The computer program product of claim 9, wherein the software package is one of a plurality of software packages in a package list, and wherein the future number of updates is a total of future number of updates estimated to be issued within the future period of time for each software package in the package list.

11. The computer program product of claim 9, wherein the future number of updates is used for calculating a risk associated with installing the software package to form a package risk, and wherein the package risk is a probabilistic measure of a risk to the data processing system from installing the future number of updates.

12. The computer program product of claim 11, further comprising:

computer usable code for identifying an indicator about the package, wherein the indicator is one of a code quality indicator, and a security information indicator; and

computer usable code for using the indicator in calculating the risk factor.

13. The computer program product of claim 9, wherein the computer usable code for calculating the future number of updates comprises:

computer usable code for identifying a set of random points in time in the past period of time;

computer usable code for identifying the past number of updates issued at each of the random points in time in the set of random points in time, to form a set of past issued updates;

computer usable code for extrapolating from the set of past issued updates to forecast the future number of updates estimated to be issued within the future period of time.

14. The computer program product of claim 9, wherein the computer usable code for calculating the future number of updates comprises:

computer usable code for identifying a set of random points in time in the past period of time;

computer usable code for identifying a past number of updates installed at each of the random points in time in the set of random points in time, to form a set of past installed updates;

computer usable code for extrapolating from the set of past installed updates to forecast the future number of updates estimated to be issued within the future period of time.

15. The computer program product of claim 9, wherein the future number of updates estimated to be issued within the future period of time is a probabilistic estimate.

16. The computer program product of claim 9, wherein the computer usable code for estimating comprises:

computer usable code for predicting a likelihood that the future period of time will end with zero updates.

17. A data processing system for forecasting risk, the data processing system comprising:

a storage device, wherein the storage device stores computer usable program code; and

a processor, wherein the processor executes the computer usable program code, wherein the computer usable program code comprises;

computer usable code for selecting a software package to install on a data processing system;

computer usable code for specifying a past period of time;

computer usable code for calculating a past number of updates issued for the software package within the past period of time;

computer usable code for specifying a future period of time; and

computer usable code for estimating a future number of updates expected to be issued within the future period of time, wherein the software package is one of a plurality of software packages in a package list, and wherein the future number of updates is a total of future number of updates estimated to be issued within the future period of time for each software package in the package list.

18. The data processing system of claim 17, wherein the future number of updates is used for calculating a risk associated with installing the software package to form a package risk, wherein the package risk is a probabilistic measure of a risk to the data processing system from installing the future number of updates, and the data processing system further comprising:

computer usable code for identifying an indicator about the package, wherein the indicator is one of a code quality indicator, and a security information indicator; and

computer usable code for using the indicator in calculating the risk factor.

19. The data processing system of claim 17, wherein the computer usable code for calculating the future number of updates comprises:

computer usable code for identifying a set of random points in time in the past period of time;

computer usable code for identifying the past number of updates issued at each of the random points in time in the set of random points in time, to form a set of past issued updates; and

computer usable code for extrapolating from the set of past issued updates to forecast the future number of updates estimated to be issued within the future period of time.

20. The data processing system of claim 17, wherein the computer usable code for estimating comprises:

computer usable code for predicting a likelihood that the future period of time will end with zero updates.