Systems and methods for policy-based program configuration

• US 7,917,954 B1
• Filed: 09/28/2010
• Issued: 03/29/2011
• Est. Priority Date: 09/28/2010
• Status: Active Grant

• Current Assignee: Kaspersky Lab ZAO
• Original Assignee: Kaspersky Lab ZAO
• Inventors: Zaitsev, Oleg V.
• Primary Examiner(s): Cervetti, David Garcia
• Application Number:
  US12/892,678
• Time in Patent Office: 182 Days
• Field of Search: 726/22, 726/23, 726/25, 726/34
• US Class Current: 726/23
• CPC Class Codes: G06F 11/3051 Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs verification or detection of system hardware configuration G06F11/2247
• CPC Class Codes: G06F 11/3409 for performance assessment
• CPC Class Codes: G06F 11/3428 Benchmarking
• CPC Class Codes: G06F 2201/81 Threshold
• CPC Class Codes: G06F 2201/875 Monitoring of systems including the internet

Abstract

Disclosed are systems, methods and computer program products for adaptive polity-based configuration of programs. An example method comprises collecting from a computer system configuration and performance information, rating system performance based on the collected information and classifying the computer system based on its performance rating. The method further includes selecting based on the system classification an operational policy for a computer program. Each policy specifies different program settings and different limits of system resource utilization by the program for each class of computer systems. The method further includes monitoring system resource utilization during program execution to determine whether system resource utilization exceeds the limit specified in the selected operational policy. If the system resource utilization exceeds the specified limit, the method selects another policy specifying different program settings and a different limit of system resource utilization.

Claims

1. A method for adaptive policy-based program configuration, the method comprises:

collecting from a computer system configuration and performance information for one or more computer system components;

rating performance of the computer system based on the collected information;

classifying the computer system based on the system'"'"'s performance rating, wherein different predefined classes of computer systems have different performance characteristics;

selecting based on the system classification one of a plurality of predefined operational policies for a computer program to be executed on the computer system, wherein each predefined operational policy specifies different program settings and different limits of system resource utilization by the computer program for each class of computer systems;

monitoring system resource utilization by the computer program being executed on the computer system to determine whether system resource utilization exceeds the limit specified in the selected operational policy; and

if the system resource utilization exceeds the specified limit, selecting for the computer program another predefined operational policy specifying different program settings and a different limit of system resource utilization.

2. The method of claim 1 further comprises:

repeating the steps of monitoring system resource utilization and selecting another operational policy from the plurality of predefined policies until the system resource utilization does not exceed the limit specified in the last selected policy.

3. The method of claim 2 further comprises:

if the system resource utilization exceeds the limits specified in all predefined operational policies, creating in real-time a custom operational policy for the computer system, wherein the custom policy specifies different program settings that minimize system resource utilization by the computer program.

4. The method of claim 3, wherein rating performance of the computer system comprises:

rating performance of a component of the computer system as a function of the component'"'"'s performance characteristic and one or more technical characteristics.

5. The method of claim 4 further comprises:

adjusting performance rating of the component of the computer system by a weighting coefficient to account for the relative costs of different components of the computer system, interoperability between different components of the computer system, or effect of an operating system on performance of different components.

6. The method of claim 5 further comprises:

rating performance of the computer system by applying fuzzy logic rules to the adjusted performance ratings of system components.

7. The method of claim 6, wherein computer program settings include malware scan settings, wherein the scan settings include:

day/time setting indicating start of malware scan, scan duration setting, hardware scan settings, and software scan settings.

8. A system for adaptive policy-based program configuration comprises:

a memory configured to store

a classification of computer systems having different performance characteristics;

a plurality of predefined operational policies for a computer program, wherein each predefined operation policy specifies different program settings and different limits of system resource utilization by the program for each class of computer systems;

a processor configured to

collect from a computer system configuration and performance information for one or more computer system components;

rate performance of the computer system based on the collected information;

classify the computer system based on the system'"'"'s performance rating;

select based on the system'"'"'s classification one of the plurality of predefined operational policies for the computer program to be executed on the computer system;

monitor system resource utilization by the computer program being executed on the computer system to determine whether system resource utilization exceeds the limit specified in the selected operational policy; and

if the system resource utilization exceeds the specified limit , select for the computer program another predefined operational policy specifying different program settings and a different limit of system resource utilization.

9. The system of claim 8, wherein the processor being further configured to repeat monitoring system resource utilization and selecting another operational policy from the plurality of predefined policies until the system resource utilization does not exceed the limit specified in the last selected policy.

10. The system of claim 9, wherein the processor being further configured to create in real-time a custom operational policy for the computer system if the system resource utilization exceeds the limits specified in all predefined operational policies, wherein the custom policy specifies different program settings that minimize system resource utilization by the computer program.

11. The system of claim 10, wherein to rate performance of the computer system the processor being further configured to rate performance of a component of the computer system as a function of the component'"'"'s performance characteristic and one or more technical characteristics.

12. The system of claim 11, wherein the processor being further configured to adjust performance rating of the component of the computer system by a weighting coefficient to account for the relative costs of different components of the computer system, interoperability between different components of the computer system, or effect of an operating system on the performance of different components.

13. The system of claim 12, wherein the processor being further configured to rate performance of the computer system by applying fuzzy logic rules to the adjusted performance ratings of system components.

14. The system of claim 13, wherein computer program settings include malware scanning settings, wherein the scanning settings include:

day/time setting indicating start of malware scanning, scan duration setting, hardware scan settings, and software scan settings.

15. A computer program product embedded in a non-transitory computer-readable storage medium, the computer-readable storage medium comprises computer-executable instructions for:

collecting from a computer system configuration and performance information for one or more computer system components;

rating performance of the computer system based on the collected information;

classifying the computer system based on the system'"'"'s performance rating, wherein different predefined classes of computer systems have different performance characteristics;

selecting based on the system classification one of a plurality of predefined operational policies for a computer program to be executed on the computer system, wherein each predefined operational policy specifies different program settings and different limits of system resource utilization by the computer program for each class of computer systems;

monitoring system resource utilization by the computer program being executed on the computer system to determine whether system resource utilization exceeds the limit specified in the selected operational policy;

if the system resource utilization exceeds the specified limit, selecting for the computer program another predefined operational policy specifying different program settings and a different limit of system resource utilization.

16. The medium of claim 15 further comprises instructions for

repeating monitoring system resource utilization and selecting another operational policy from the plurality of predefined policies until the system resource utilization does not exceed the limit specified in the last selected policy;

and

if the system resource utilization exceeds the limits specified in all predefined operational policies, creating in real-time a custom operational policy for the computer system, wherein the custom policy specifies different program settings that minimize system resource utilization by the computer program.

17. The medium of claim 16, wherein instructions for rating performance of the computer system comprise instructions for rating performance of a component of the computer system as a function of the component'"'"'s performance characteristic and one or more technical characteristics.

18. The medium of claim 17 further comprises instructions for adjusting performance rating of the component of the computer system by a weighting coefficient to account for the relative costs of different components of the computer system, interoperability between different components of the computer system, or effect of an operating system on the performance of different components.

19. The medium of claim 18 further comprises instructions for rating performance of the computer system by applying fuzzy logic rules to the adjusted performance ratings of system components.

20. The medium of claim 19, wherein computer program settings include malware scanning settings, wherein the scanning settings include:

day/time setting indicating start of malware scanning, scan duration setting, hardware scan settings, and software scan settings.