System Configuration Analysis

• US 20090204561A1
• Filed: 02/11/2008
• Published: 08/13/2009
• Est. Priority Date: 02/11/2008
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Meltzer, Talya, Sabato, Sivan
• Granted Patent: US 8,019,987 B2
• Time in Patent Office: Days
• US Class Current: 706/47
• CPC Class Codes: G06N 5/02 Knowledge representation; Symbolic representation

Abstract

In accordance with one embodiment, a method for detecting potential problems in the configuration or components of a complex system comprises comparing first configuration data for a first system with second configuration data compiled from analyzing a plurality of systems in a selected population; and reporting anomalies associated with the first system, in response to determining that the first configuration data deviates from components determined to be common to the selected population.

Claims

1. A method comprising:

comparing first configuration data for a first system with second configuration data compiled from analyzing a plurality of systems in a selected population; and

reporting anomalies associated with the first system, in response to determining that the first configuration data deviates from components determined to be common to the selected population.

2. The method of claim 1 wherein the second configuration data is compiled for a selected population with a membership that dynamically changes as one or more systems are added or removed from the selected population.

3. The method of claim 1 wherein the first configuration data comprises information about attributes associated with the first system'"'"'s components.

4. The method of claim 1 wherein the second configuration data comprises information about attributes associated with components of one or more systems in the selected population.

5. The method of claim 1 wherein the first configuration data comprises information about values assigned to attributes associated with the first system'"'"'s components.

6. The method of claim 1 wherein the second configuration data comprises information about values assigned to attributes associated with components of one or more systems in the selected population.

7. The method of claim 1 wherein the second configuration data is compiled from grouping systems together that have uncommon components from among said plurality of systems in the selected population.

8. The method of claim 7 wherein the second configuration data is compiled from systems having uncommon attributes associated with one or more components.

9. The method of claim 8 wherein the second configuration data is compiled from systems having uncommon values associated with one or more attributes.

10. The method of claim 1 wherein a threshold is calculated to identify the anomalies associated with the first system by determining probability for one or more of said components to be anomalous.

11. The method of claim 10 wherein a missing mass estimation scheme is utilized to calculate the threshold.

12. The method of claim 1 further comprising determining whether any configuration data for the first system not identified as anomalous may be deemed anomalous using a missing mass estimation scheme.

13. The method of claim 1 further comprising ceasing to report anomalies associated with the first system, in response to determining that said anomalies correspond to system properties that do not have a predetermined level of probability mass concentrated in a small number of values.

14. The method of claim 1 further comprising ceasing to report anomalies associated with the first system, in response to determining that the frequency of anomalous value for a first system property divided by the frequency of least common normal value for the first system is greater than a first threshold.

15. A computer program product comprising a computer useable medium having a computer readable program, wherein the computer readable program when executed on a computer causes the computer to:

compare first configuration data for a first system with second configuration data compiled from analyzing a plurality of systems in a selected population; and

report anomalies associated with the first system, in response to determining that the first configuration data deviates from components determined to be common to the selected population.

16. The computer program product of claim 15 wherein the second configuration data is compiled for a selected population with a membership that dynamically changes as one or more systems are added or removed from the selected population.

17. The computer program product of claim 15 wherein the first configuration data comprise information about attributes associated with the first system'"'"'s components.

18. The computer program product of claim 15 wherein the second configuration data comprises information about attributes associated with components of one or more systems in the selected population.

19. The computer program product of claim 15 wherein the first configuration data comprise information about values assigned to attributes associated with the first system'"'"'s components.

20. The computer program product of claim 15 wherein the second configuration data comprise information about values assigned to attributes associated with components of one or more systems in the selected population.

21. A system comprising:

a data storage medium in operational relationship with at least one controller comprising;

a logic unit to compare first configuration data for a first system with second configuration data compiled from analyzing a plurality of systems in a selected population; and

a logic unit to report anomalies associated with the first system, in response to determining that the first configuration data deviates from components determined to be common to the selected population.

22. The system of claim 21 wherein the second configuration data is compiled for a selected population with a membership that dynamically changes as one or more systems are added or removed from the selected population.

23. The system of claim 21 wherein the first configuration data comprise information about attributes associated with the first system'"'"'s components.

24. The system of claim 21 wherein the second configuration data comprises information about attributes associated with components of one or more systems in the selected population.

25. The system of claim 21 wherein the first configuration data comprise information about values assigned to attributes associated with the first system'"'"'s components.