Security in a computing environment by automatically defining the scope and services of components within the computing environment

Patent metadata

Field	Value
Publication number	US-11847481-B2
Application number	US-201916514059-A
Country	US
Kind code	B2
Filing date	Jul 17, 2019
Priority date	Jul 17, 2019
Publication date	Dec 19, 2023
Grant date	Dec 19, 2023

Abstract

A feature selection methodology is disclosed. In a computer-implemented method, components of a computing environment are automatically monitored, and have a feature selection analysis performed thereon. Provided the feature selection analysis determines that features of the components are well defined, a classification of the features is performed. Provided the feature selection analysis determines that features of the components are not well defined, a similarity analysis of the features is performed. Results of the feature selection methodology are generated.

First claim

What we claim is:

1. A computer-implemented method for automated analysis of features in a computing environment, said method comprising:
automatically monitoring components of said computing environment;
performing a feature selection analysis of said components of said computing environment;
provided said feature selection analysis determines that features of said components of said computing environment are well defined, performing a classification of said features of said components of said computing environment;
provided said feature selection analysis determines that features of said components of said computing environment are not well defined, performing a similarity analysis of said features of said components of said computing environment; and
providing results of said method for automated analysis of said features of said components of said computing environment;
generating a matrix transformation output
implementing a Singular Value Decomposition (SVD) to reduce the size of said matrix transformation output and
wherein said performing a feature selection analysis of said components of said computing environment further comprises:
performing a Term Frequency-Inverse Document Frequency (TF-IDF) analysis method on said components of said computing environment.

2. The computer-implemented method of claim 1 wherein said performing a feature selection analysis of said components of said computing environment further comprises:
performing entropy-based analysis method on said components of said computing environment.

3. The computer-implemented method of claim 1 wherein said performing a feature selection analysis of said components of said computing environment further comprises:
performing a singular value decomposition on results obtained from said feature selection analysis of said components of said computing environment.

4. The computer-implemented method of claim 1 wherein said performing a similarity analysis of said features of said components of said computing environment further comprises:
performing a cosine similarity process on said features of said components of said computing environment.

5. The computer-implemented method of claim 1 wherein said providing results of said method for said automated analysis of said features of said components of said computing environment further comprises:
providing said results to a security system.

6. The computer-implemented method of claim 1 further comprising:
periodically repeating said automated analysis of said features in said computing environment to generate updated results of said automated analysis of said features of said components of said computing environment.

7. The computer-implemented method of claim 6 further comprising:
providing said updated results of said automated analysis of said features of said components of said computing environment to a security system.

8. The computer-implemented method of claim 1 further comprising:
automatically providing said results for said automated analysis of said features of said components of said computing environment without requiring intervention by a system administrator.

9. A computer-implemented method for automated analysis of features in a computing environment, said method comprising:
automatically monitoring components of said computing environment;
performing a feature selection analysis of said components of said computing environment, said feature selection analysis selected from the group consisting of: Term Frequency-Inverse Document Frequency (TF-IDF) analysis, and entropy-based analysis;
provided said feature selection analysis determines that features of said components of said computing environment are well defined, performing a classification of said features of said components of said computing environment;
provided said feature selection analysis determines that features of said components of said computing environment are not well defined, performing a similarity analysis of said features of said components of said computing environment;
generating a matrix transformation output
implementing a Singular Value Decomposition (SVD) to reduce the size of said matrix transformation output and
providing results of said method for automated analysis of said features of said components of said computing environment.

10. The computer-implemented method of claim 9 wherein said performing a similarity analysis of said features of said components of said computing environment further comprises:
performing a cosine similarity process on said features of said components of said computing environment.

11. The computer-implemented method of claim 9 wherein said providing results of said method for said automated analysis of said features of said components of said computing environment further comprises:
providing said results to a security system.

12. The computer-implemented method of claim 9 further comprising:
periodically repeating said automated analysis of said features in said computing environment to generate updated results of said automated analysis of said features of said components of said computing environment.

Assignees

• Vmware Inc

Inventors

• Zan Bin
• Mo Zhen
• Ganti Vijay
• Akkineni Vamsi Krishna

Classifications

• G06F9/45558 Primary

  Hypervisor-specific management and integration aspects · CPC title

• G06F17/16

  Matrix or vector computation {, e.g. matrix-matrix or matrix-vector multiplication, matrix factorization (matrix transposition G06F7/78)} · CPC title

• G06F18/2415

  based on parametric or probabilistic models, e.g. based on likelihood ratio or false acceptance rate versus a false rejection rate · CPC title

• G06N20/00

  Machine learning · CPC title

• G06F2009/45591

  Monitoring or debugging support · CPC title