Information processing device which carries out risk analysis and risk analysis method

• US 9,898,525 B2
• Filed: 12/16/2013
• Issued: 02/20/2018
• Est. Priority Date: 12/17/2012
• Status: Active Grant

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Maeno, Yoshiharu
• Primary Examiner(s): Le, Hung
• Application Number:
  US14/652,191
• Publication Number:
  US 20150370886A1
• Time in Patent Office: 1,527 Days
• Field of Search: None
• CPC Class Codes: G06F 11/008 Reliability or availability analysis
• CPC Class Codes: G06F 16/285 Clustering or classification
• CPC Class Codes: G06Q 10/0635 Risk analysis of enterprise or organisation activities

Abstract

An information processing device includes: a unit configured to compute a service influence degree for each risk factor with respect to each service, on the basis of information which indicates a relation between components which have the risk factors and other components which are influenced by the state of the components, information which denotes characteristics of the respective risk factors, and information which denotes a correspondence between the services and these components; and a unit configured to compute, on the basis of the computed service influence degrees, similarities between specific risk factors and other risk factors, and for generating and outputting a set of component identification information on the basis of the computed similarities.

Claims

1. A system comprising:

a system to provide services, the system including a plurality of components;

a risk analysis device having memory storing instructions and a processor to execution the instructions to;

compute, on the basis of risk factor influence information representing a relation between a component of said components having a risk factor and other components of said components which are to be influenced by a state of said component, component characteristic information representing characteristics of each of said risk factors, and service information representing correspondence between said services and said components, a service influence degree corresponding to each of said risk factors with respect to each of said services;

compute, on the basis of said service influence degrees, similarities between a specific one of said risk factors and the other ones of said risk factors, and generate and output information including at least a set of pieces of identification information each representing said component corresponding to said risk factor selected on the basis of said similarities; and

based on the output information, remove at least two said risk factors simultaneously by one of making one of said components redundant with another component of said components, and replacing said component with another component of said components having higher reliability than said component.

2. The system according to claim 1, wherein said similarities are distances among service influence degrees corresponding to respective ones of said risk factors.

3. The system according to claim 1, wherein said risk group generation unit computes, with respect to each of said risk factors, a total influence degree obtained by summing up said service influence degrees corresponding to the risk factor, and computes said similarities between said risk factor having the largest one of said total influence degrees and the other ones of said risk factors.

4. The system according to claim 3, wherein each said total influence degree is computed by weighting said service influence degrees by characteristics of respective ones of said services.

5. The system according to claim 1, wherein said similarities between said risk factor designated from the external and the other ones of said risk factors are computed.

6. The system according to claim 1, wherein said characteristics of respective ones of said risk factors each are any one of a failure rate, an inverse of recovery rate, the harmonic mean of the failure rate, the inverse of recovery rate, a mean time between failures, a mean time to recovery, the number of failure occurrences, the number of successful recoveries, and a value computed by optionally combining them.

7. The system according to claim 1, wherein said information including at least said set of pieces of identification information each representing said component, is generated on the basis of removal cost information representing costs for removing respective ones of said risk factors and a limit cost value indicating a limit of the total sum of said costs.

8. The system according to claim 1, wherein the processor executes the instructions to further accept input of any optional one of said risk factor influence information, said component characteristics information and said service information.

9. A method which a computer executes, including:

computing, on the basis of risk factor influence information representing a relation between a component having a risk factor, included in a system for providing services and other components included in the system which are to be influenced by a state of said component, component characteristic information representing characteristics of each of said risk factors, and service information representing correspondence between said services and said components, a service influence degree corresponding to each of said risk factors with respect to each of said services;

computing, on the basis of said service influence degrees, similarities between a specific one of said risk factors and the other ones of said risk factors, and generating and outputting information including at least a set of pieces of identification information each representing said component corresponding to said risk factor selected on the basis of said similarities; and

based on the output information, removing at least two said risk factors simultaneously by one of making one of said component and said other components redundant with another component included in the system, and replacing said component with another component including in the system having higher reliability than said component.

10. A non-transitory computer-readable non-transitory recording medium for recording a program for making a computer execute:

a process to compute, on the basis of risk factor influence information representing relation between a component having a risk factor, included in a system for providing services and other components included in the system which are to be influenced by a state of said component, component characteristic information representing characteristics of each of said risk factors, and service information representing correspondence between said services and said components, a service influence degree corresponding to each of said risk factors with respect to each of said services;

a process of computing, on the basis of said service influence degrees, similarities between a specific one of said risk factors and the other ones of said risk factors;

a process of generating and outputting information including at least a set of pieces of identification information each representing said component corresponding to said risk factor selected on the basis of said similarities; and

based on the output information, removing at least two said risk factors simultaneously by one of making one of said component and said other components redundant with another component included in the system, and replacing said component with another component including in the system having higher reliability than said component.