METHOD FOR DETERMINING PRIORITY FOR INSTALLING A PATCH INTO MULTIPLE PATCH RECIPIENTS OF A NETWORK

• US 20090100419A1
• Filed: 10/12/2007
• Published: 04/16/2009
• Est. Priority Date: 10/12/2007
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Kumhyr, David Bruce, Watt, Stephen James, Goldberg, Itzhack, Childress, Rhonda L.
• Granted Patent: US 8,181,173 B2
• Time in Patent Office: Days
• US Class Current: 717/171
• CPC Class Codes: G06F 16/122 using management policies backup systems G06F11/1446; file migration policies for HSM systems G06F16/185
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/62 Establishing a time schedule for servicing the requests

Abstract

Embodiments of the invention provide a computer implemented method and system for installing a patch on at least some of the servers of a network having multiple servers. The method comprises the steps of identifying a plurality of servers of the network that each requires installation of the patch, and assigning two or more priority values to each of the identified servers. The priority values for a given identified server are each associated with a different criterion in a set of criteria. The method further comprises selectively processing the assigned priority values for respective identified servers, in order to determine an initial priority, comprising a first sort order, for installing the patch on each identified server. The first sort order is revised in accordance with information pertaining to prior use of respective identified servers, to provide a second sort order. The patch is installed on each of the identified servers, in an order determined at least in part by the second sort order. As an option, one or more additional sort orders can be provided for use in determining the order for installing the patch.

Claims

1. A computer implemented method for installing a patch on at least some of the servers of a network having multiple servers, said method comprising the steps of:

identifying a plurality of servers of said network that each requires installation of said patch;

assigning two or more priority values to each of said identified servers, wherein the priority values for a given identified server are each associated with a different criterion in a set of criteria;

selectively processing the assigned priority values for respective identified servers, in order to determine an initial priority, comprising a first sort order, for installing said patch on each identified server;

revising said first sort order in accordance with information pertaining to prior use of respective identified servers, in order to provide a second sort order; and

installing said patch on each of said identified servers, in an order determined at least in part by said second sort order.

2. The method of claim 1, wherein:

respective steps of said method are applied to other patch recipients besides servers, and one or more additional sort orders are provided for use in determining the order for installing said patch in said identified servers.

3. The method of claim 1, wherein:

said set of criteria includes one or more prespecified policies of an entity that owns or controls said network.

4. The method of claim 3, wherein:

said prespecified policies include at least rules pertaining to the comparative amounts of use, value and vulnerability that characterize respective servers of said network.

5. The method of claim 1, wherein:

said selective processing step includes at least placing first and second priority values for each identified server into first and second columns of an array, respectively, and applying a sorting procedure to said array to derive said first sort order.

6. The method of claim 5, wherein:

said sorting procedure includes initially ranking said identified servers in a numerical order based on their respective first priority values, and then ranking said identified servers in a numerical order based on their respective second priority values, within said initial ranking.

7. The method of claim 1, wherein:

said set of criteria includes selected configuration items and attributes of said servers of said network.

8. The method of claim 1, wherein:

said information pertaining to prior use is used to determine the probability that a given identified server will be used during a prespecified time frame.

9. The method of claim 1, wherein:

a prespecified cluster of said network servers are all given the same priority for installation of said patch.

10. The method of claim 1, wherein:

data for providing said information pertaining to prior use of respective identified servers is continually acquired and stored, for subsequent use in said revising step.

11. A computer program product in a computer readable medium for installing a patch on at least some of the servers of a network having multiple servers, said computer program product comprising:

first instructions for identifying a plurality of servers of said network that each requires installation of said patch;

second instructions for assigning two or more priority values to each of said identified servers, wherein the priority values for a given identified server are each associated with a different criterion in a set of criteria;

third instructions for selectively processing the assigned priority values for respective identified servers, in order to determine an initial priority, comprising a first sort order, for installing said patch on each identified server;

fourth instructions for revising said first sort order in accordance with information pertaining to prior use of respective identified servers, in order to provide a second sort order; and

fifth instructions for installing said patch on each of said identified servers, in an order determined at least in part by said second sort order.

12. The computer program product of claim 11, wherein:

said set of criteria includes one or more prespecified policies of an entity that contains said network.

13. The computer program product of claim 11, wherein:

said selective processing includes at least placing first and second priority values for each identified server into first and second columns of an array, respectively, and applying a sorting procedure to said array to derive said first sort order.

14. The computer program product of claim 11, wherein:

said set of criteria includes selected configuration items and attributes of said servers of said network.

15. The computer program product of claim 11, wherein:

said information pertaining to prior use is used to determine the probability that a given identified server will be used during a prespecified time frame.

16. An apparatus for installing a patch on at least some of the servers of a network having multiple servers, said apparatus comprising:

means for identifying a plurality of servers of said network that each requires installation of said patch;

means for assigning two or more priority values to each of said identified servers, wherein the priority values for a given identified server are each associated with a different criterion in a set of criteria;

means for selectively processing the assigned priority values for respective identified servers, in order to determine an initial priority, comprising a first sort order, for installing said patch on each identified server;

means for revising said first sort order in accordance with information pertaining to prior use of respective identified servers, in order to provide a second sort order; and

means for installing said patch on each of said identified servers, in an order determined at least in part by said second sort order.

17. The apparatus of claim 16, wherein:

said set of criteria includes one or more prespecified policies of an entity that contains said network.

18. The apparatus of claim 16, wherein:

said processing means includes at least means for placing first and second priority values for each identified server into first and second columns of an array, respectively, and applying a sorting procedure to said array to derive said first sort order.

19. The apparatus of claim 16, wherein:

said set of criteria includes selected configuration items and attributes of said servers of said network.

20. The apparatus of claim 16, wherein:

said information pertaining to prior use is used to determine the probability that a given identified server will be used during a prespecified time frame.