Dynamic remediation actions in response to configuration checks in an information processing system

Patent metadata

Field	Value
Publication number	US-11900131-B2
Application number	US-202017071407-A
Country	US
Kind code	B2
Filing date	Oct 15, 2020
Priority date	Oct 15, 2020
Publication date	Feb 13, 2024
Grant date	Feb 13, 2024

Abstract

Techniques comprise receiving results from one or more configuration checks performed on one or more elements of an information processing system, wherein the results are received from a set of one or more interfaces of the information processing system and comprise an indication of detection of a configuration issue with at least a portion of the one or more elements of the information processing system. The method generates one or more remediation actions based on at least a portion of the received results, and then causes initiation of the one or more remediation actions within the information processing system at least in part through the set of one or more interfaces of the information processing system from which the results are received to effectuate remediation of the configuration issue with the portion of the one or more elements of the information processing system.

First claim

What is claimed is:

1. An apparatus comprising:
at least one processing device comprising a processor coupled to a memory;
the at least one processing device, when executing program code, is configured to:
receive results from one or more configuration checks performed on one or more elements of an information processing system, wherein the one or more configuration checks are accessible via a database in the information processing system, and wherein the results are received from a set of one or more interfaces of the information processing system and comprise an indication of detection of a configuration issue with at least a portion of the one or more elements of the information processing system;
identify one or more remediation actions in response to at least a portion of the results received from the one or more configuration checks, wherein the one or more remediation actions are at least in part accessible via the same database in the information processing system as are the one or more configuration checks;
evaluate the one or more remediation actions against one or more configuration policies associated with the information processing system, wherein the one or more configuration policies are accessible via the same database in the information processing system as are the one or more configuration checks;
cause initiation of the one or more remediation actions within the information processing system at least in part through the same set of one or more interfaces of the information processing system from which the results are received to effectuate remediation of the configuration issue with the portion of the one or more elements of the information processing system, and wherein causing initiation of the one or more remediation actions within the information processing system is performed simultaneously with receiving the results from the one or more configuration checks;
receive results from re-performance of the one or more configuration checks on one or more elements of an information processing system following application of the one or more remediation actions;
in response to determining the configuration issue is not resolved by the one or more remediation actions, access one or more further remediation actions in the database based on at least a portion of the received results;
cause simultaneous initiation of the one or more further remediation actions within the information processing system to effectuate remediation of the configuration issue with the portion of the one or more elements of the information processing system; and
dynamically add one or more additional remediation actions to the database for access and initiation to effectuate remediation of one or more newly discovered configuration issues, wherein an execution check is performed on the one or more additional remediation actions before adding the one or more additional remediation actions to the database;
wherein the database used in the one or more configuration checks is separate from the apparatus used in the dynamic adding of one or more additional remediation actions such that one or more additional configuration checks are dynamically added separately from the dynamic adding of one or more additional remediation actions, which enables:
the one or more additional configuration checks to be dynamically added while the one or more remediation actions are simultaneously added or initiated; and
the one or more additional remediation actions to be dynamically added while the one or more configuration checks are simultaneously added or initiated;

wherein the received results from the one or more configuration checks and the one or more additional configuration checks are versioned and thereby tracked such that the received results are traceable to a version of the configuration check that was executed; and
wherein one or more of the results of the one or more configuration checks and the one or more remediation action are sent to an external platform for artificial intelligence/machine learning (AI/ML) analysis.

2. The apparatus of claim 1 , wherein the at least one processing device, when executing program code, is further configured to send the one or more remediation actions to a user for authorization before causing initiation of the one or more remediation actions.

3. The apparatus of claim 1 , wherein the at least one processing device, when executing program code, is further configured to generate code executable by the information processing system that defines the one or more remediation actions to effectuate remediation of the configuration issue.

4. The apparatus of claim 1 , wherein the at least one processing device, when executing program code, is further configured to cause initiation of automatic performance of the one or more remediation actions to effectuate remediation of the configuration issue with the portion of the one or more elements of the information processing system.

5. The apparatus of claim 1 , wherein the at least one processing device, when executing program code, is further configured to cause initiation of manual performance of the one or more remediation actions to effectuate remediation of the configuration issue with the portion of the one or more elements of the information processing system.

6. The apparatus of claim 1 , wherein the at least one processing device, when executing program code, is further configured to cause initiation of third party performance of the one or more remediation actions to effectuate remediation of the configuration issue with the portion of the one or more elements of the information processing system.

7. A method comprising:
receiving results from one or more configuration checks performed on one or more elements of an information processing system, wherein the one or more configuration checks are accessible via a database in the information processing system, and wherein the results are received from a set of one or more interfaces of the information processing system and comprise an indication of detection of a configuration issue with at least a portion of the one or more elements of the information processing system;
identifying one or more remediation actions in response to at least a portion of the results received from the one or more configuration checks, wherein the one or more remediation actions are at least in part accessible via the same database in the information processing system as are the one or more configuration checks;
evaluating the one or more remediation actions against one or more configuration policies associated with the information processing system, wherein the one or more configuration policies are accessible via the same database in the information processing system as are the one or more configuration checks;
causing initiation of the one or more remediation actions within the information processing system at least in part through the same set of one or more interfaces of the information processing system from which the results are received to effectuate remediation of the configuration issue with the portion of the one or more elements of the information processing system, and wherein causing initiation of the one or more remediation actions within the information processing system is performed simultaneously with receiving the results from the one or more configuration checks;
receiving results from re-performance of the one or more configuration checks on one or more elements of an information processing system following application of the one or more remediation actions;
in response to determining the configuration issue is not resolved by the one or more remediation actions, accessing one or more further remediation actions in the database based on at least a portion of the recei

Assignees

• Emc Ip Holding Co Llc

Inventors

• Moran John
• Sharma Anurag
• Trudel Christopher

Classifications

• G06F9/44552 Primary

  Conflict resolution, i.e. enabling coexistence of conflicting executables · CPC title

• G06F9/44505

  Configuring for program initiating, e.g. using registry, configuration files · CPC title

• G06F21/44 Primary

  Program or device authentication · CPC title

• G06F21/577

  Assessing vulnerabilities and evaluating computer system security · CPC title