Security tool

Patent metadata

Field	Value
Publication number	US-11244058-B2
Application number	US-201916574865-A
Country	US
Kind code	B2
Filing date	Sep 18, 2019
Priority date	Sep 18, 2019
Publication date	Feb 8, 2022
Grant date	Feb 8, 2022

Abstract

An apparatus includes a memory and a hardware processor. The memory stores a plurality of conversion rules. The processor receives a first log from a server. The first log indicates that the server attempted to install a software patch. The processor converts, based on the plurality of conversion rules, the first log into a different format to produce a second log and extracts a plurality of words from the second log. The processor also determines, based on the extracted words, that the software patch install failed and determines, based on the extracted words, a cause for the software patch install failure. The processor further determines a series of steps to remedy the cause and perform the series of steps to remedy the cause.

First claim

What is claimed is:

1. An apparatus comprising:
a memory configured to store a plurality of conversion rules; and
a hardware processor communicatively coupled to the memory, the hardware processor configured to:
receive a first log from a server, the first log indicating that the server attempted to install a software patch;
convert, based on the plurality of conversion rules, the first log into a different format to produce a second log;
extract a plurality of words from the second log;
determine, based on the extracted words, that the software patch install failed;
determine, based on the extracted words, a cause for the software patch install failure;
determine a series of steps to remedy the cause; and
perform the series of steps to remedy the cause.

2. The apparatus of claim 1 , wherein the hardware processor is further configured to:
determine, based on the cause, that the server will experience a second failure when installing a second software patch;
determine a second cause for the second failure; and
perform a second series of steps to remedy the second cause before the server attempts to install the second software patch.

3. The apparatus of claim 1 , wherein the hardware processor is further configured to communicate an alert indicating the software patch install failure, the cause, and the series of steps.

4. The apparatus of claim 1 , wherein the hardware processor is further configured to communicate the second log to an administrator device.

5. The apparatus of claim 1 , wherein the hardware processor is further configured to reinstall the software patch after performing the series of steps.

6. The apparatus of claim 1 , wherein the series of steps comprises:
decompiling the software patch;
changing software code for the software patch; and
recompiling the software patch.

7. The apparatus of claim 1 , wherein the series of steps comprises adjusting a setting on the server.

8. A method comprising:
storing, by a memory, a plurality of conversion rules;
receiving, by a hardware processor communicatively coupled to the memory, a first log from a server, the first log indicating that the server attempted to install a software patch;
converting, by the processor, based on the plurality of conversion rules, the first log into a different format to produce a second log;
extracting, by the processor, a plurality of words from the second log;
determining, by the processor, based on the extracted words, that the software patch install failed;
determining, by the processor, based on the extracted words, a cause for the software patch install failure;
determining, by the processor, a series of steps to remedy the cause; and
performing, by the processor, the series of steps to remedy the cause.

9. The method of claim 8 , further comprising:
determining, based on the cause, that the server will experience a second failure when installing a second software patch;
determining a second cause for the second failure; and
performing a second series of steps to remedy the second cause before the server attempts to install the second software patch.

10. The method of claim 8 , further comprising communicating an alert indicating the software patch install failure, the cause, and the series of steps.

11. The method of claim 8 , further comprising communicating the second log to an administrator device.

12. The method of claim 8 , further comprising reinstalling the software patch after performing the series of steps.

13. The method of claim 8 , wherein the series of steps comprises:
decompiling the software patch;
changing software code for the software patch; and
recompiling the software patch.

14. The method of claim 8 , wherein the series of steps comprises adjusting a setting on the server.

15. A system comprising:
a plurality of servers; and
a security tool comprising a memory and a hardware processor communicatively coupled to the memory, the memory configured to store a plurality of conversion rules, the hardware processor configured to:
receive a first log from a server of the plurality of servers, the first log indicating that the server attempted to install a software patch;
convert, based on the plurality of conversion rules, the first log into a different format to produce a second log;
extract a plurality of words from the second log;
determine, based on the extracted words, that the software patch install failed;
determine, based on the extracted words, a cause for the software patch install failure;
determine a series of steps to remedy the cause; and
perform the series of steps to remedy the cause.

16. The system of claim 15 , wherein the hardware processor is further configured to:
determine, based on the cause, that the server will experience a second failure when installing a second software patch;
determine a second cause for the second failure; and
perform a second series of steps to remedy the second cause before the server attempts to install the second software patch.

17. The system of claim 15 , wherein the hardware processor is further configured to communicate an alert indicating the software patch install failure, the cause, and the series of steps.

18. The system of claim 15 , wherein the hardware processor is further configured to communicate the second log to an administrator device.

19. The system of claim 15 , wherein the hardware processor is further configured to reinstall the software patch after performing the series of steps.

20. The system of claim 15 , wherein the series of steps comprises:
decompiling the software patch;
changing software code for the software patch; and
recompiling the software patch.

Assignees

• Bank Of America

Inventors

• Kumar Hitendra
• Bolduc Scott
• Jain Rakesh

Classifications

• G06F8/65 Primary

  Updates (security arrangements therefor G06F21/57) · CPC title

• G06F2221/033

  Test or assess software · CPC title

• G06F8/41

  Compilation · CPC title

• G06F21/577 Primary

  Assessing vulnerabilities and evaluating computer system security · CPC title

• G06F8/53

  Decompilation; Disassembly · CPC title