Systems and Methods for Policy-Based Program Configuration

• US 20110289585A1
• Filed: 02/24/2011
• Published: 11/24/2011
• Est. Priority Date: 05/18/2010
• Status: Active Grant

• Current Assignee: Kaspersky Lab ZAO
• Original Assignee: Kaspersky Lab ZAO
• Inventors: Zaitsev, Oleg V.
• Granted Patent: US 8,079,060 B1
• Time in Patent Office: Days
• US Class Current: 726/24
• CPC Class Codes: G06F 11/3051 Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs verification or detection of system hardware configuration G06F11/2247
• CPC Class Codes: G06F 11/3409 for performance assessment
• CPC Class Codes: G06F 11/3428 Benchmarking
• CPC Class Codes: G06F 2201/81 Threshold
• CPC Class Codes: G06F 2201/875 Monitoring of systems including the internet

Abstract

Disclosed are systems, methods and computer program products for adaptive policy-based configuration of programs. An example method comprises collecting from computer system configuration and performance information and rating system performance based on the collected information. The method further includes selecting based on the performance rating an operational policy for a computer program. The policy specifies program settings and limits of system resource utilization by the program. The method further includes monitoring system resource utilization during program execution on the computer system to determine whether system resource utilization exceeds the limit specified in the operational policy. If the system resource utilization exceeds the specified limit, the method selects another policy specifying different program settings and a different limit of system resource utilization.

Claims

1. A method for adaptive policy-based program configuration, the method comprises:

collecting from a computer system configuration and performance information for one or more computer system components;

rating performance of the computer system based on the collected information;

determining based on the performance rating of the computer system an operational policy of a program to be executed on the computer system, wherein the operational policy specifies program settings and a limit of system resource utilization by the program;

monitoring system resource utilization during execution of the program on the computer system to determine whether system resource utilization exceeds the limit specified in the operational policy; and

if the system resource utilization exceeds the specified limit, selecting for the program another operational policy specifying different program settings.

2. The method of claim 1 further comprises repeating the steps of monitoring system resource utilization and selecting another operational policy until the system resource utilization does not exceed the specified limit.

3. The method of claim 1 further comprises if the system resource utilization exceeds the specified limits, creating in real-time a custom operational policy for the program, wherein the custom policy specifies different program settings that minimize system resource utilization by the program.

4. The method of claim 3, wherein rating performance of the computer system comprises:

rating performance of a component of the computer system as a function of the component'"'"'s performance characteristic and one or more technical characteristics.

5. The method of claim 4 further comprises adjusting performance rating of the component of the computer system by a weighting coefficient to account for the relative costs of different components of the computer system, interoperability between different components of the computer system, or effect of an operating system on performance of different components.

6. The method of claim 5 further comprises rating performance of the computer system by applying fuzzy logic rules to the adjusted performance ratings of system components.

7. The method of claim 6, wherein program settings include malware scan settings, wherein the scan settings include:

day/time setting indicating start of malware scan, scan duration setting, hardware scan settings, and software scan settings.

8. A system for adaptive policy-based program configuration comprises:

a memory configured to store a plurality of predefined operational policies for a program, wherein the policy specifies program settings and a limit of system resource utilization by the program; and

a processor coupled to the memory, the processor being configured to

collect from a computer system configuration and performance information for one or more computer system components;

rate performance of the computer system based on the collected information;

determine based on the performance rating of the computer system an operational policy of a program to be executed on the computer system;

monitor system resource utilization during execution of the program on the computer system to determine whether system resource utilization exceeds the limit specified in the operational policy; and

if the system resource utilization exceeds the specified limit, select for the program another operational policy specifying different program settings.

9. The system of claim 8, wherein the processor being further configured to repeat monitoring system resource utilization and selecting another operational policy until the system resource utilization does not exceed the specified limit.

10. The system of claim 9, wherein the processor being further configured to create in real-time a custom operational policy for the program, wherein the custom policy specifies different program settings that minimize system resource utilization by the program.

11. The system of claim 10, wherein to rate performance of the computer system the processor being further configured to rate performance of a component of the computer system as a function of the component'"'"'s performance characteristic and one or more technical characteristics.

12. The system of claim 11, wherein the processor being further configured to adjust performance rating of the component of the computer system by a weighting coefficient to account for the relative costs of different components of the computer system, interoperability between different components of the computer system, or effect of an operating system on the performance of different components.

13. The system of claim 12, wherein the processor being further configured to rate performance of the computer system by applying fuzzy logic rules to the adjusted performance ratings of system components.

14. The system of claim 13, wherein program settings include malware scanning settings, wherein the scanning settings include:

day/time setting indicating start of malware scanning, scan duration setting, hardware scan settings, and software scan settings.

15. A computer program product embedded in a non-transitory computer-readable storage medium, the computer-readable storage medium comprises computer-executable instructions for:

collecting from a computer system configuration and performance information for one or more computer system components;

rating performance of the computer system based on the collected information;

determining based on the performance rating of the computer system an operational policy of a program to be executed on the computer system, wherein the operational policy specifies program settings and a limit of system resource utilization by the program;

monitoring system resource utilization during execution of the program on the computer system to determine whether system resource utilization exceeds the limit specified in the operational policy; and

if the system resource utilization exceeds the specified limit, selecting for the program another operational policy specifying different program settings.

16. The medium of claim 15 further comprises instructions for

repeating the steps of monitoring system resource utilization and selecting another operational policy until the system resource utilization does not exceed the specified limit;

and

if the system resource utilization exceeds the specified limits, creating in real-time a custom operational policy for the program, wherein the custom policy specifies different program settings that minimize system resource utilization by the program.

17. The medium of claim 16, wherein instructions for rating performance of the computer system comprise instructions for rating performance of a component of the computer system as a function of the component'"'"'s performance characteristic and one or more technical characteristics.

18. The medium of claim 17 further comprises instructions for adjusting performance rating of the component of the computer system by a weighting coefficient to account for the relative costs of different components of the computer system, interoperability between different components of the computer system, or effect of an operating system on the performance of different components.

19. The medium of claim 18 further comprises instructions for rating performance of the computer system by applying fuzzy logic rules to the adjusted performance ratings of system components.

20. The medium of claim 19, wherein program settings include malware scanning settings, wherein the scanning settings include:

day/time setting indicating start of malware scanning, scan duration setting, hardware scan settings, and software scan settings.