HEURISTIC POLICY ANALYSIS

• US 20120102361A1
• Filed: 10/25/2010
• Published: 04/26/2012
• Est. Priority Date: 10/25/2010
• Status: Abandoned Application

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Inventors: Sass, Rami, Amiri, Ehud
• Application Number:
  US12/911,288
• Publication Number:
  US 20120102361A1
• Time in Patent Office: Days
• US Class Current: 714/37
• CPC Class Codes: G06Q 10/0637 Strategic management or analysis, e.g. setting a goal or target of an organisation; Planning actions based on goals; Analysis or evaluation of effectiveness of goals

Abstract

A system and method using statistical analysis for the process of analyzing and generating organizational policies is presented. This inventive method comprises, for one or more tests, using a test to calculate a test result for the policy based on current violator entities and potential violator entities, and determining a policy ranking for the policy based on the test result of the test, and evaluating the policy based on the policy rankings determined from the tests. The method can also comprise creating a repository comprising the policy rankings for the plurality of policies. The repository can be used to trend, benchmark, alert and improve the policies. The method can also comprise creating a rule profile for the one policy comprising the one policy, the current violator entities of the policy, the potential violator entities of the policy, the test results and the policy rankings from the tests.

Claims

1. A method for measuring usefulness of one policy of a plurality of policies in an organization having a plurality of entities, comprising steps of:

for one or more tests;

using a test to calculate a test result for the one policy based on current violator entities of the one policy and potential violator entities of the one policy, said calculating being performed using a processor; and

determining a policy ranking for the one policy based on the test result of the test; and

evaluating the one policy based on the policy rankings determined from the one or more tests.

2. The method of claim 1, further comprising the step of employing processes to trend, benchmark, alert and improve one or more of the plurality of policies, said employing performed using at least one of the policy rankings, the current violator entities, the potential violator entities, and the test results.

3. The method of claim 1, further comprising:

creating a repository comprising the policy rankings for the plurality of policies; and

obtaining a list of suspicious rules from the repository.

4. The method of claim 1, further comprising a step of creating a rule profile for the one policy comprising the one policy, the current violator entities of the one policy, the potential violator entities of the one policy, the test results and the policy rankings from the one or more tests.

5. The method of claim 1, wherein one test of the one or more tests comprises steps of:

establishing a current violator entities range and a potential violator entities range; and

setting the policy ranking based on whether the current violator entities of the one policy is within the current violator entities range and whether the potential violator entities of the one policy is within the potential violators entities range.

6. The method of claim 1, wherein one test of the one or more tests comprises steps of:

establishing a current violator entities mean, a current violators standard deviation, a potential violator entities mean and a potential violator entities standard deviation; and

setting the policy ranking based on whether the current violator entities of the one policy is within a value of the current violator entities standard deviation and whether the potential violator entities of the one policy is within a value of the potential violators entities standard deviation.

7. The method of claim 1, wherein one test of the one or more tests comprises steps of

establishing a current violator entities range and a potential violator entities range;

and

setting the policy ranking based on whether the current violator entities of the one policy is within the current violator entities range and whether the potential violator entities of the one policy is within the potential violators entities range.

8. A computer readable storage medium storing a program of instructions executable by a machine to perform a method of evaluating usefulness of a policy, comprising:

for one or more tests;

using a test to calculate a test result for the one policy based on current violator entities of the one policy and potential violator entities of the one policy, said calculating being performed using a processor; and

determining a policy ranking for the one policy based on the test result of the test; and

evaluating the one policy based on the policy rankings determined from the one or more tests.

9. The computer readable storage medium of claim 8, further comprising employing processes to trend, benchmark, alert and improve one or more of the plurality of policies, said employing performed using at least one of the policy rankings, the current violator entities, the potential violator entities, and the test results.

10. The computer readable storage medium of claim 8, further comprising:

creating a repository comprising the policy rankings for the plurality of policies; and

obtaining a list of suspicious rules from the repository.

11. The computer readable storage medium of claim 8, further comprising creating a rule profile for the one policy comprising the one policy, the current violator entities of the one policy, the potential violator entities of the one policy, the test results and the policy rankings from the one or more tests.

12. The computer readable storage medium of claim 8, wherein one test of the one or more tests comprises:

establishing a current violator entities range and a potential violator entities range; and

setting the policy ranking based on whether the current violator entities of the one policy is within the current violator entities range and whether the potential violator entities of the one policy is within the potential violators entities range.

13. The computer readable storage medium of claim 8, wherein one test of the one or more tests comprises:

establishing a current violator entities mean, a current violators standard deviation, a potential violator entities mean and a potential violator entities standard deviation; and

setting the policy ranking based on whether the current violator entities of the one policy is within a value of the current violator entities standard deviation and whether the potential violator entities of the one policy is within a value of the potential violators entities standard deviation.

14. The computer readable storage medium of claim 8, wherein one test of the one or more tests comprises:

establishing a current violator entities range and a potential violator entities range; and

setting the policy ranking based on whether the current violator entities of the one policy is within the current violator entities range and whether the potential violator entities of the one policy is within the potential violators entities range.

15. A system for evaluating usefulness of a policy, comprising:

a processor on a server;

a database on the server;

a module operable to, for one or more tests, use a test to calculate a test result for the one policy based on current violator entities of the one policy and potential violator entities of the one policy, said calculating being performed using the processor, and determine a policy ranking for the one policy based on the test result of the test, and said module further operable to evaluate the one policy based on the policy rankings determined from the one or more tests.

16. The system of claim 15, wherein the module is further operable to employ processes to trend, benchmark, alert and improve one or more of the plurality of policies, said employing performed using at least one of the policy rankings, the current violator entities, the potential violator entities, and the test results.

17. The system of claim 15, wherein the module is further operable to create a repository comprising the policy rankings for the plurality of policies.

18. The system of claim 15, wherein the module is further operable to create a rule profile for the one policy comprising the one policy, the current violator entities of the one policy, the potential violator entities of the one policy, the test results and the policy rankings from the one or more tests.

19. The system of claim 15, wherein one test of the one or more tests is performed by:

establishing a current violator entities range and a potential violator entities range; and

setting the policy ranking based on whether the current violator entities of the one policy is within the current violator entities range and whether the potential violator entities of the one policy is within the potential violators entities range.

20. The system of claim 15, wherein one test of the one or more tests is performed by:

establishing a current violator entities mean, a current violators standard deviation, a potential violator entities mean and a potential violator entities standard deviation; and

setting the policy ranking based on whether the current violator entities of the one policy is within a value of the current violator entities standard deviation and whether the potential violator entities of the one policy is within a value of the potential violators entities standard deviation.

21. The system of claim 15, wherein one test of the one or more tests is performed by:

establishing a current violator entities range and a potential violator entities range; and

setting the policy ranking based on whether the current violator entities of the one policy is within the current violator entities range and whether the potential violator entities of the one policy is within the potential violators entities range.