Intelligent monitoring and logging platform

Patent metadata

Field	Value
Publication number	US-11973776-B2
Application number	US-202117238774-A
Country	US
Kind code	B2
Filing date	Apr 23, 2021
Priority date	Apr 23, 2021
Publication date	Apr 30, 2024
Grant date	Apr 30, 2024

Abstract

An enterprise-wise means for determining monitoring requirements for technology resources, such as, software, hardware, firmware, network or the like and implementing the monitoring. Artificial Intelligence (AI) is implemented to determine monitoring requirements based on characteristics of the technology resource that is to be monitored. In this regard, the characteristics of the technology resource serve to define the problem(s), such as cyber threats and/or performance issues that the technology resource currently faces or will face in the future. By determining the monitoring requirements based on the technology resource's characteristics, including the technological environment, the invention serves to describe what needs to be monitored in terms of the problems that the technology resource currently faces or will face.

First claim

What is claimed is:

1. A system for determining monitoring requirements and implementing monitoring for enterprise-wide technology resources, the system comprising:
a plurality of monitoring tools including cyber-threat monitoring tools and performance monitoring tools, each of the monitoring tools configured to monitor and log for one or more specific events or actions performed by or associated with one or more of the enterprise-wide technology resources; and
a computing platform including a memory and at least one processor in communication with the memory, wherein the memory stores instructions that are executable by the at least one processor and configured to:
receive, for each of the enterprise-wide technology resources, characteristics, wherein the characteristics include at least (i) a type of technology resource, (ii) one or more technological environments in which the technology resource is deployed, and (iii) one or more purposes for the technology resource,
implement first Artificial Intelligence (AI) including first Machine Learning (ML) techniques to determine, for each of the enterprise-wide technology resources, monitoring requirements based on the characteristics,
determine, for each of the enterprise-wide technology resources, a set of monitoring tools from amongst the monitoring tools that satisfies at least a portion of the monitoring requirement, wherein determining the set of monitoring tools includes optimizing monitoring occurring at each of the enterprise-wide technology resources by minimizing (i) monitoring redundancy and (ii) the monitoring requirements not satisfied,
identify, for at least one of the enterprise-wide technology resources, at least one monitoring requirement from amongst the monitoring requirements that are not satisfied by the set of monitoring tools and implement second AI including second ML techniques to determine actions to satisfy the at least one monitoring requirement,
deploy and execute, on each of the enterprise-wide technology resources, the set of monitoring tools, and
log specific events or actions monitored by the set of monitoring tools.

2. The system of claim 1 , wherein the plurality of monitoring tools comprises cyber threat monitoring tools and wherein the instructions configured to determine the monitoring requirements are further configured to determine cyber threat monitoring requirements.

3. The system of claim 2 , wherein the plurality of monitoring tools further comprises performance monitoring tools and wherein the instructions configured to determine the monitoring requirements are further configured to determine performance monitoring requirements.

4. The system of claim 1 , wherein the instructions configured to determine the monitoring requirements are further configured to determine the monitoring requirements by applying monitoring rules selected based on the characteristics.

5. The system of claim 1 , wherein the instructions are further configured to identify, for each of the enterprise-wide technology resources, the monitoring requirements that cannot be satisfied by the plurality of monitoring tools.

6. The system of claim 1 , wherein the instructions are further configured to validate, for each of the enterprise-wide technology resources, at least one selected from a group comprising of (i) an accuracy of the monitoring requirements, and (ii) that the deployed monitoring tools satisfy the monitoring requirements.

7. The system of claim 1 , wherein the system for determining monitoring requirements and implementing monitoring for the enterprise-wide technology resources is included in an enterprise-wide technology resource management system.

8. The system of claim 7 , wherein the enterprise-wide technology resource management system includes an inventory management sub-system configured to track deployment of the enterprise-wide technology resources across an enterprise.

9. The system of claim 7 , wherein the enterprise-wide technology resource management system includes a monitoring results analytics sub-system configured to analytically analyze the logged specific events and actions monitored by the monitoring tools to (i) identify current problems related to a corresponding technology resource from amongst the enterprise-wide technology resources, and (ii) predict future issues based on identified trends in the logged specific events and actions.

10. A computer-implemented method for determining monitoring requirements and implementing monitoring for enterprise-wide technology resources, the method is executable by one or more computing processing devices and comprises:
receiving, for each of a plurality of enterprise-wide technology resources, characteristics, wherein the characteristics include at least (i) a type of technology resource, (ii) one or more technological environments in which the technology resource is deployed, and (iii) one or more purposes for the technology resource;
implementing first Artificial Intelligence (AI) including first Machine Learning (ML) techniques to determine, for each of the plurality of enterprise-wide technology resources, monitoring requirements based on the characteristics;
determining, for each of the plurality of enterprise-wide technology resources, a set of monitoring tools from amongst a plurality of monitoring tools including cyber-threat monitoring tools and performance monitoring tools, wherein the set of monitoring tools satisfies at least a portion of the monitoring requirements, wherein determining the set of monitoring tools includes optimizing monitoring occurring at each of the enterprise-wide technology resources by minimizing (i) monitoring redundancy and (ii) the monitoring requirements not satisfied;
identifying, for at least one of the plurality of enterprise-wide technology resources, at least one monitoring requirement from amongst the monitoring requirements that are not satisfied by the set of monitoring tools and implement second AI including second ML techniques to determine actions to satisfy the at least one monitoring requirement;
deploying and executing, on each of the plurality of enterprise-wide technology resources, the set of monitoring tools; and
logging specific events or actions monitored by the set of monitoring tools.

11. The computer-implemented method of claim 10 , wherein the determining the set of monitoring tools from amongst the plurality of monitoring tools further defines the monitoring tools as one or more of (i) cyber threat monitoring tools and (ii) performance monitoring tools and wherein the determining monitoring requirements further comprises determining one or more of (i) cyber threat monitoring requirements, an (ii) performance monitoring requirements.

12. The computer-implemented method of claim 10 , wherein the determining the monitoring requirements further comprises determining the monitoring requirements by applying monitoring rules selected based on the characteristics.

13. The computer-implemented method of claim 10 , further comprising:
identifying, for each of the enterprise-wide technology resources, the monitoring requirements that cannot be satisfied by the plurality of monitoring tools.

14. The computer-implemented method of claim 10 , further comprising:
validating, for each of the enterprise-wide technology resources, at least one selected from a group comprising of (i) an accuracy of the monitoring requirements, and (ii) that the deployed monitoring tools satisfy the monitoring requirements.

15. A computer program product comprising:
a non-transitory computer-readable medium comprising:
a first set of codes for causin

Assignees

• Bank Of America

Inventors

• Kling John Howard
• Dudley Charles Edward

Classifications

• H04L63/1425 Primary

  Traffic logging, e.g. anomaly detection · CPC title

• G06N20/00

  Machine learning · CPC title

• H04L63/1408

  by monitoring network traffic (monitoring network traffic per se H04L43/00) · CPC title