Managing security breaches in a networked computing environment
US-9462013-B1 · Oct 4, 2016 · US
US10606687B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-10606687-B2 |
| Application number | US-201715830206-A |
| Country | US |
| Kind code | B2 |
| Filing date | Dec 4, 2017 |
| Priority date | Dec 4, 2017 |
| Publication date | Mar 31, 2020 |
| Grant date | Mar 31, 2020 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
A system for remediating computing-related events by taking into account the past performance of remediation processes and the current run-time environment in which the remedy will be deployed. Robotic Process Automation is implemented to identify computing-related events requiring automation and to record actions that are taken to remediate the events. Robotic scripts (bots) are created based on the recorded actions and are implemented in a learning-mode, in which run-time conditions and level of performance are recorded, such that, run-time conditions and performance are determinative of which bot or combination of bots are implemented for subsequent occurrence of computing-related events. Additionally, remedial process associated with the bot(s) may be executed in a simulated environment prior to the production run-time computing environment to validate the bot and insure the likelihood of effective performance of the remedial process in the run-time production environment.
Opening claim text (preview).
The invention claimed is: 1. A system for remediating computing-related events, the system comprising: a computing platform including a memory and at least one processor in communication with the first memory; a first robotic process automation (RPA) module stored in the memory, executable by the at least one processor and configured to monitor a computing environment to detect occurrences of a computing-related event, wherein the computing-related event is a behavior occurring within the computing environment that deviates from a normal state; a second RPA module stored in the memory, executable by the at least one processor and configured to, in response to receiving notification, from the first RPA module, of each occurrence of the computing-related event: record actions performed to remediate the computing-related event, and create a robotic script (bot) that defines a remediation process for remediating the computing-related event based on the recorded actions and records (i) parameters of a run-time production computing environment in which the remediation process is deployed, and (ii) a level of performance of the remediation process in the computing environment. 2. The system of claim 1 , further comprising: a bot determining module stored in the memory, executable by the at least one processor and configured to, in response to creating a plurality of bots and receiving notification, from the first RPA module, of an occurrence of the computing-related event, determine which of the plurality of bots to deploy as a remediation process for the computing-related event. 3. The system of claim 2 , wherein the bot determining module is further configured in response to determining to creating a plurality of bots and receiving notification, from the first RPA module, determine a combination of two or more the plurality of bots to deploy as the remediation process for the computing-related event. 4. The system of claim 3 , wherein the second RPA module is further configured to create a robotic script (bot) for the combination of the two or more of the plurality of bots that defines a remediation process for remediating the computing-related event. 5. The system of claim 2 , further comprising: a bot simulation module stored in the memory, executable by the at least processor and configured to, prior to deploying one or more bots as remediation for a computing-related event, execute the one or more bots in a simulated environment having substantially same parameters as the run-time production computing environment, and wherein the bot determining module is further configured to determine which of the one or more previously created bots to deploy as the remediation process, based on executing the one or more bots previously created bots in the simulated environment. 6. The system of claim 1 , wherein the bot determining module is further configured to determine which of the plurality of bots to deploy as the remediation process for the computing-related event based at least one or more of (a) the computing-related event, (b) parameters of a run-time production computing environment in which the computing-related event occurred or a remediation process is to be deployed, (c) parameters of a run-time production computing environment in which the plurality of bots were previously deployed, and (d) performance of previous remediation processes in which the plurality of bots were previously deployed. 7. The system of claim 1 , further comprising: a bot determining module stored in the memory, executable by the at least one processor and configured to, in response to receiving notification, from the first RPA module, of an occurrence of the computing-related event: determine to (i) implement the second RPA module to create a bot for remediating the computing-related event, or (ii) implement one or more of a plurality bots to remediate the computing-related event. 8. The system of claim 7 , wherein the bot determining modules is further configured to determine to (i) or (ii) is based on at least one of (a) the computing-related event, (b) parameters of a run-time production computing environment in which the computing-related event occurred or a remediation process is to be deployed, (c) parameters of a run-time production computing environment in which the plurality of bots were previously deployed, and (d) performance of previous remediation processes in which the plurality of bots were previously deployed. 9. The system of claim 7 , wherein the bot determining module is further configured in response to determining to implement one or more previously created bots to remediate the computing-related event, determine which of the plurality of bots to deploy as the remediation process. 10. The system of claim 7 , wherein the bot determining module is further configured in response to determining to implement one or more previously created bots to remediate the computing-related event, determine a combination of two or more the plurality of bots to deploy as the remediation process. 11. The system of claim 10 , wherein the second RPA module is further configured to create a robotic script (bot) for the combination of the two or more of the plurality of bots that defines a remediation process for remediating the computing-related event. 12. The system of claim 7 , further comprising; a bot simulation module stored in the memory, executable by the at least processor and configured to, prior to deploying one or more bots as remediation for a computing-related event, execute the one or more bots in a simulated environment having substantially same parameters as the run-time production computing environment, and wherein the bot determining module is further configured to determine which of the one or more previously created bots to deploy as the remediation process, based on executing the one or more bots previously created bots in the simulated environment. 13. The system of claim 1 , further comprising: a bot simulation module stored in the memory, executable by the at least processor and configured to, prior to deploying the bot as remediation for a computing-related event: execute the bot in a simulated environment having substantially same parameters as the run-time production computing environment, determine a likely acceptable level of performance for the bot in the run-time production computing environment based on a performance of the bot in the simulated environment, and in response to determining the likely acceptable level of performance, authorize the bot for remediating the computing-related event. 14. The system of claim 1 , further comprising: a remediation performance evaluating module stored in the memory, executable by the at least one processor and configured to, in response to deploying the bot as a remediation process for a computing-related event, determine performance of the remediation process in a run-time production computing environment. 15. A computer processor-implemented method for remediating computing-related events, the method comprising monitoring, by a robotic process automation (RPA) computing module, a computing environment to detect occurrences of a computing-related event, wherein the computing-related event is a behavior occurring within the computing environment that deviates from a normal state; in response to receiving notification of each occurrence of the computing-related event, recording, by a RPA computing module, actions performed to remediate the computing-related event; and creating, by a RPA computing module, a robotic script (bot) that defines a remediation process
using machine learning or artificial intelligence · CPC title
in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems · CPC title
Remedial or corrective actions (recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40) · CPC title
Storage of error reports, e.g. persistent data storage, storage using memory protection · CPC title
in a remote unit communicating with a single-box computer node experiencing an error/fault (remote testing G06F11/2294) · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.