Management of decommissioned server assets in a shared data environment
First Claim
Patent Images
1. A computer system for monitoring decommissioned servers, the computer system comprising:
- one or more computer processors;
one or more non-transitory computer readable storage media;
program instructions stored on the one or more non-transitory computer readable storage media for execution by at least one of the one or more computer processors, the program instructions comprising;
program instructions to aggregate information associated with an environment, from a plurality of resources external to a server resource, wherein the plurality of resources external to the server resource provide a historical indication on activities related to the server resource within the environment, and wherein the information is directly gathered from monitoring address resolution protocol (ARP) cache data from a router;
program instructions to analyze the aggregated information associated with the environment;
program instructions to calculate a baseline of server activity, based on a comparison of network activity from the ARP cache data associated with the environment, which shows decommissioned assets continuing to be active;
program instructions to determine whether new information associated with the environment is consistent with the baseline of server activity, wherein network traffic and types of packets from decommissioned assets are used to detect whether new information associated with the environment is consistent with the baseline of server activity; and
program instructions to, responsive to determining that the new information associated with the environment is not consistent with the baseline of server activity, identify the new information as a possible misuse and flag the new information associated with unusual server activity.
1 Assignment
0 Petitions
Accused Products
Abstract
Embodiments of the present invention provide systems and methods for monitoring decommissioned servers in a shared data environment. Embodiments of the present invention can be used to aggregate information associated with an environment from external resources, and calculate a baseline of server activity from the aggregated information. When new information is received, it is compared to the baseline of server activity in order to determine a possible misuse of the server assets, when inconsistencies are detected between the baseline of activity and the new information.
-
Citations
1 Claim
-
1. A computer system for monitoring decommissioned servers, the computer system comprising:
-
one or more computer processors; one or more non-transitory computer readable storage media; program instructions stored on the one or more non-transitory computer readable storage media for execution by at least one of the one or more computer processors, the program instructions comprising; program instructions to aggregate information associated with an environment, from a plurality of resources external to a server resource, wherein the plurality of resources external to the server resource provide a historical indication on activities related to the server resource within the environment, and wherein the information is directly gathered from monitoring address resolution protocol (ARP) cache data from a router; program instructions to analyze the aggregated information associated with the environment; program instructions to calculate a baseline of server activity, based on a comparison of network activity from the ARP cache data associated with the environment, which shows decommissioned assets continuing to be active; program instructions to determine whether new information associated with the environment is consistent with the baseline of server activity, wherein network traffic and types of packets from decommissioned assets are used to detect whether new information associated with the environment is consistent with the baseline of server activity; and program instructions to, responsive to determining that the new information associated with the environment is not consistent with the baseline of server activity, identify the new information as a possible misuse and flag the new information associated with unusual server activity.
-
Specification