Environment change management and risk analysis

Patent metadata

Field	Value
Publication number	US-12242995-B2
Application number	US-202117443259-A
Country	US
Kind code	B2
Filing date	Jul 23, 2021
Priority date	Jul 23, 2021
Publication date	Mar 4, 2025
Grant date	Mar 4, 2025

Abstract

The exemplary embodiments disclose a method, a computer program product, and a computer system for managing environment change. The exemplary embodiments may include determining a plurality of change and risk models for a plurality of computing environments, generating a plurality of association rules based on the plurality of change and risk models, and generating a joint association rule by combining at least two of the plurality of association rules, wherein the joint association rule indicates, from the three dimensions, an association relationship between changes and risk events over at least a part of the time series.

First claim

What is claimed is:

1. A computer-implemented method for managing environment change, the method comprising:
determining, by a system operatively coupled to one or more processors, a plurality of change and risk models for a plurality of computing environments, wherein each change and risk model is three dimensional to indicate respective changes applied to one of the plurality of computing environments and respective risk events occurring in the computing environment over a time series;
generating, by the system, a plurality of association rules based on the plurality of change and risk models, wherein each of the plurality of association rules indicates a relationship between two items from the group consisting of one change, one risk event, and one time point of the time series;
generating, by the system, a joint association rule by combining at least two of the plurality of association rules, wherein the joint association rule indicates, in three dimensions, an association relationship between changes and risk events over at least a part of the time series;
determining, by the system, the one or more risk events that may arise by the one or more changes that have been applied; and
determining, by the system, steps about how to implement the changes so as to avoid negative impacts by the one or more risk events, and implementing, by the system, actions to handle the one or more risk events that may result from the one or more changes in order to reduce loss.

2. The method of claim 1 , wherein the generating the joint association rule comprises:
determining, by the system, a first association rule and a second association rule from the plurality of association rules that are associated with a same change, a same risk event, and a same time point in the time series; and
combining, by the system, the first and second association rules to form at least a part of the joint association rule.

3. The method of claim 2 , wherein the first and second association rules are determined with a first confidence score and a second confidence score, respectively, to indicate respective confidences of the association relationships indicated by the first and second association rules, and wherein combining the first and second association rules comprises:
determining, by the system, a joint confidence score based on the first confidence score and the second confidence score; and
in accordance with a determination that the joint confidence score exceeds a confidence threshold, combining, by the system, the first and second association rules to form at least a part of the joint association rule.

4. The method of claim 1 , further comprising:
in response to an analysis request for a target computing environment, by the system, information related to the target computing environment, wherein the information indicates at least one item from the group consisting of: one change previously applied to the target computing environment at a first time point, one risk event occurred in the target computing environment at a second time step, and one change to be applied to the target computing environment;
determining, by the system, whether the joint association rule is applicable for the target computing environment by comparing the information with the changes and the risk events indicated by the joint association rule; and
in accordance with a determination that the joint association rule is applicable, determining, by the system, an analysis result for the target computing environment based on the joint association rule.

5. The method of claim 4 , wherein determining the analysis result comprises:
determining, by the system, whether the plurality of association rules are applicable for the target computing environment by comparing the information with the changes and risk events indicated by the plurality of association rules; and
in accordance with a determination that at least one of the plurality of association rules is applicable, determining, by the system, the analysis result further based on the at least one association rule.

6. The method of claim 4 , wherein comparing the information with the changes and the risk events indicated by the joint association rule comprises:
matching a characteristic of the target computing environment with characteristics of the plurality of computing environments; and
in accordance with a determination that the characteristic of the target computing environment matches the characteristics of the plurality of computing environments, comparing, by the system, the information with the changes and the risk events indicated by the joint association rule.

7. The method of claim 1 , wherein each change and risk model of the plurality of change and risk models is represented in a three-dimensional (3D) cube structure, and a slice of the 3D cube structure indicates one item from the group consisting of a change applied to a computing environment along with respective risk events that occurred in the computing environment over a time series, respective changes applied to a computing environment along with a risk event that occurred in the computing environment over a time series, and respective changes applied to a computing environment along with respective risk events that occurred in the computing environment at a time point of a time series.

8. The method of claim 7 , wherein each of the plurality of association rules is specific to a change, a risk event, or a time point in a remaining one of the three dimensions, and wherein determining the plurality of change and risk models comprises at least one action from the group consisting of:
determining, by the system, an association rule specific for a certain change based on respective slices of 3D cubes represented by the plurality of change and risk models and corresponding to the certain change;
determining, by the system, an association rule specific for a certain risk event based on respective slices of 3D cubes represented by the plurality of change and risk models and corresponding to the certain risk event; and
determining, by the system, an association rule specific for a certain time point based on respective slices of 3D cubes represented by the plurality of change and risk models and corresponding to the certain time point.

9. A computer system for managing environmental change, the computer system comprising:
one or more computer processors, one or more computer-readable storage media, and program instructions stored on the one or more of the computer-readable storage media for execution by at least one of the one or more computer processors capable of performing a computer-implemented method, the computer-implemented method comprising:
determining a plurality of change and risk models for a plurality of computing environments, each change and risk model having three dimensions to indicate respective changes applied to one of the plurality of computing environments along with respective risk events occurred in the computing environment over a time series;
generating a plurality of association rules based on the plurality of change and risk models, each of the plurality of association rules indicating, from two of the three dimensions, an association relationship between two of the following: at least one change, at least one risk event, and at least one time point of the time series;
generating a joint association rule by combining at least two of the plurality of association rules, wherein the joint association rule indicates, from the three dimensions, an association relationship between changes and risk events over at least a part of the time series;
determining the one or more risk events that may arise by the one or more changes that have been

Assignees

• IBM

Inventors

• Luo Chen
• Wang Fu F W
• Zhang Shi Jie
• Gao Lei
• Bing Sun
• Hou Meng Ru
• Liu Yu Heng

Classifications

• G06Q10/0635

  Risk analysis of enterprise or organisation activities · CPC title

• G06Q10/067

  Enterprise or organisation modelling · CPC title

• G06F16/283

  Multi-dimensional databases or data warehouses, e.g. MOLAP or ROLAP · CPC title

• G06Q10/06375 Primary

  Prediction of business process outcome or impact based on a proposed change · CPC title