Dynamically updating feature set recommendation databases

Patent metadata

Field	Value
Publication number	US-10904295-B2
Application number	US-202016817070-A
Country	US
Kind code	B2
Filing date	Mar 12, 2020
Priority date	Jul 9, 2015
Publication date	Jan 26, 2021
Grant date	Jan 26, 2021

Abstract

Systems, methods, and software described herein provide for identifying recommended feature sets for new security applications. In one example, a method of providing recommended feature sets for a new security application includes identifying a request for the new security application, and determining a classification for the new security application. The method further provides identifying related applications to the new security application based on the classification, and identifying a feature set for the new security application based on features provided in the related applications.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
receiving, by a service including an application features database, data indicating a particular set of application features implemented by a first software application, wherein the first software application is associated with a software classification of a plurality of software classifications, and wherein the application features database stores a set of application features implemented by software applications associated with the software classification;
determining that the particular set of application features implemented by the first software application includes a new feature compared to the set of application features implemented by software applications associated with the software classification;
adding the new feature to the set of application features to obtain an updated set of application features;
receiving, over a network, a request for recommended application features to be implemented by a second software application being developed at a developer computer system, wherein the second software application is associated with the software classification; and
sending data identifying the updated set of application features.

2. The computer-implemented method of claim 1 , wherein the data indicating the particular set of application features implemented by the first software application includes information about the new feature, and wherein the information about the new feature includes at least one of: a feature name, a unified syntax operation name to be used to execute the new feature, a hardware configuration supported by the first software application, or a software configuration of the first software application.

3. The computer-implemented method of claim 1 , wherein the first software application is associated with a first software developer, and wherein the second software application is associated with a second software developer that is different from the first software developer.

4. The computer-implemented method of claim 1 , further comprising causing display of a graphical user interface including an interface element that enables a user to specify the software classification.

5. The computer-implemented method of claim 1 , wherein the first software application is at least one of: a firewall application, an antivirus application, a ticketing application, a backup application, or a network security application.

6. The computer-implemented method of claim 1 , wherein the software application is a security application, and wherein the application features include a feature used to respond to security threats associated with a computing network.

7. The computer-implemented method of claim 1 , wherein the application feature database includes a plurality of classifications, and wherein each classification of the plurality of classifications is associated with a respective set of application features.

8. The computer-implemented method of claim 1 , wherein an application feature of the set of application features is associated with a unified command of a unified command language defined by an administration system.

9. The computer-implemented method of claim 1 , wherein the application features database stores, for at least one application feature of the set of application features, a description of operations to be performed to implement the at least one application feature.

10. The computer-implemented method of claim 1 , further comprising determining, based on characteristics of the second software application, that the second software application is associated with the software classification.

11. The computer-implemented method of claim 1 , wherein the request includes an identifier of the software classification associated with the second software application.

12. An apparatus comprising:
a processor;
a non-transitory computer readable storage medium storing instructions which, when executed by the processor, cause the processor to:
receive, by a service including an application features database, data indicating a particular set of application features implemented by a first software application, wherein the first software application is associated with a software classification of a plurality of software classifications, and wherein the application features database stores a set of application features implemented by software applications associated with the software classification;
determine that the particular set of application features implemented by the first software application includes a new feature compared to the set of application features implemented by software applications associated with the software classification;
add the new feature to the set of application features to obtain an updated set of application features;
receive, over a network, a request for recommended application features to be implemented by a second software application being developed at a developer computer system, wherein the second software application is associated with the software classification; and
send data identifying the updated set of application features.

13. The system of claim 12 , wherein the data indicating the particular set of application features implemented by the first software application includes information about the new feature, and wherein the information about the new feature includes at least one of: a feature name, a unified syntax operation name to be used to execute the new feature, a hardware configuration supported by the first software application, or a software configuration of the first software application.

14. The system of claim 12 , wherein the first software application is associated with a first software developer, and wherein the second software application is associated with a second software developer that is different from the first software developer.

15. The system of claim 12 , wherein the instructions, when executed by the processor, further cause the processor to cause display of a graphical user interface including an interface element that enables a user to specify the software classification.

16. The system of claim 12 , wherein the first software application is at least one of: a firewall application, an antivirus application, a ticketing application, a backup application, or a network security application.

17. A non-transitory computer readable storage medium storing instructions which, when executed by a processor, cause the processor to perform operations comprising:
receiving, by a service including an application features database, data indicating a particular set of application features implemented by a first software application, wherein the first software application is associated with a software classification of a plurality of software classifications, and wherein the application features database stores a set of application features implemented by software applications associated with the software classification;
determining that the particular set of application features implemented by the first software application includes a new feature compared to the set of application features implemented by software applications associated with the software classification;
adding the new feature to the set of application features to obtain an updated set of application features;
receiving, over a network, a request for recommended application features to be implemented by a second software application being developed at a developer computer system, wherein the second software application is associated with the software classification;

Assignees

• Splunk Inc

Inventors

• Satish Sourabh
• Friedrichs Oliver
• Mahadik Atif
• Salinas Govind
• Russell Ryan

Classifications

• G06F21/00

  Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity · CPC title

• G06F21/577

  Assessing vulnerabilities and evaluating computer system security · CPC title

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title