System for managing an instructure with security

Patent metadata

Field	Value
Publication number	US-12047340-B2
Application number	US-201816236385-A
Country	US
Kind code	B2
Filing date	Dec 29, 2018
Priority date	Apr 29, 2013
Publication date	Jul 23, 2024
Grant date	Jul 23, 2024

Abstract

A system is provided for managing an infrastructure. An extraction engine is in communication with a managed infrastructure that includes physical hardware. A signalizer engine includes one or more of an NMF engine (Non-negative matrix factorization), a k-means clustering engine (a method of vector quantization), and a topology proximity engine. The signalizer engine determines one or more common characteristics of events and produces clusters of events relating to the failure or errors in the infrastructure. The signalizer engine uses graph coordinates and optionally a subset of attributes assigned to each event to generate one or more clusters to bring together events whose characteristics are similar. One or more interactive displays provide a collaborative interface coupled to the extraction and the signalizer engine with a collaborative interface (UI) for decomposing events from the infrastructure. The events are converted into words and subsets to group the events into clusters that relate to security of the managed infrastructure. In response to grouping the events physical changes are made to at least a portion of the physical hardware. In response to production of the clusters security of the managed infrastructure is maintained.

First claim

What is claimed is:

1. A system for managing a managed infrastructure, comprising:
an extraction engine in communication with the managed infrastructure across an IP network at high speed and with low latency, where high speed connection is measured in gigabits and low latency is measured in microseconds;
a signalizer engine that includes one or more of an NMF engine (Non-negative matrix factorization), a k-means clustering engine (a method of vector quantization), and a topology proximity engine, the signalizer engine determining one or more common characteristics of events and producing clusters of events relating to the failure or errors in the infrastructure, the signalizer engine using graph coordinates and optionally a subset of attributes assigned to each event to generate one or more clusters to bring together events whose characteristics are similar, the topology engine using a source address for each event of the managed infrastructure that represents node to node connectivity, the topology engine assigning a graph coordinate to the event with an optional subset of attributes being extracted for each event and turned into a vector;
one or more interactive displays in a situation room, the one or more interactive displays providing a collaborative interface coupled to the extraction and the signalizer engines with a collaborative interface (UI) for decomposing events from the infrastructure, the situation room coupled to or including a dashboard design system, a display computer system, and a data system;
a dashboard converter logic configured to provide communication between a graphical dashboard and one or more problem walls stored from clustering messages received from the managed infrastructure;
converting the events into words and into subsets of events used to group the events into clusters that relate to a failure or an actionable problem in the physical hardware managed infrastructure directed to supporting the flow and processing of information of the managed infrastructure, in response to the grouping related to the failure or actionable problem in the physical hardware, physical changes are made to at least a portion of the physical hardware, wherein the physical changes comprise creating physical and virtual links between the managed infrastructure and a system server; and
wherein in response to production of the clusters security of the managed infrastructure is maintained.

2. The system of claim 1 , wherein security includes at least one of managed infrastructure: breach, intrusion or propagation.

3. The system of claim 1 , wherein security includes managed infrastructure: access control, intrusion detection and threat propagation.

4. The system of claim 1 , wherein security includes authentication of a subject.

5. The system of claim 1 , wherein security includes authentication of a subject.

6. The system of claim 5 , wherein authorization specifies what a subject can do.

7. The system of claim 1 , wherein the security of the managed infrastructure comprises an audit.

8. The system of claim 1 , where security includes identification and authentication to ensure that only authorized subjects can access the managed infrastructure.

9. The system of claim 1 , wherein security includes access approval grants to the managed infrastructure by association of users with resources that they are allowed to access, based on an authorization policy.

10. The system of claim 1 , wherein machine learning is utilized to educate the system.

11. The system of claim 1 , wherein the system learns from prior situations.

12. The system of claim 11 , wherein the prior situations are used to discard things that are not relevant to a situation.

13. The system of claim 11 , wherein the system focuses on one or more elements of a situation.

14. The system of claim 1 , wherein the user interface is configured to provide a summary view of a situation.

15. The system of claim 1 , wherein the interface is configured to provide a summary view of the plurality of situations.

16. The system of claim 1 , further comprising:
filtering to reduce a number of situations displayed based on attributes.

17. The system of claim 1 , wherein the system is configured to allow users to create a user post.

18. The system of claim 1 , wherein the system is configured to provide chat conversations relative to a situation.

19. The system of claim 1 , further comprising: a team room that includes members.

20. The system of claim 19 , wherein a situation is linked to the team room.

Assignees

• Dell Products Lp

Inventors

• Tee Philip

Classifications

• G06F18/23213

  with fixed number of clusters, e.g. K-means clustering · CPC title

• H04L67/55

  Push-based network services · CPC title

• H04L67/535

  Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34) · CPC title

• H04L51/212

  using filtering or selective blocking · CPC title

• H04L41/0604

  using filtering, e.g. reduction of information by using priority, element types, position or time · CPC title