US20110289585A1 - Systems and Methods for Policy-Based Program Configuration - Google Patents
Systems and Methods for Policy-Based Program Configuration Download PDFInfo
- Publication number
- US20110289585A1 US20110289585A1 US13/034,257 US201113034257A US2011289585A1 US 20110289585 A1 US20110289585 A1 US 20110289585A1 US 201113034257 A US201113034257 A US 201113034257A US 2011289585 A1 US2011289585 A1 US 2011289585A1
- Authority
- US
- United States
- Prior art keywords
- program
- performance
- computer system
- resource utilization
- computer
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3051—Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/34—Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment
- G06F11/3409—Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment for performance assessment
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/34—Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment
- G06F11/3409—Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment for performance assessment
- G06F11/3428—Benchmarking
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2201/00—Indexing scheme relating to error detection, to error correction, and to monitoring
- G06F2201/81—Threshold
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2201/00—Indexing scheme relating to error detection, to error correction, and to monitoring
- G06F2201/875—Monitoring of systems including the internet
Definitions
- the present disclosure relates generally to the field of computer science and, in particular, to systems, methods and computer program products for adaptive policy-based program configuration for improving computer performance and resource utilization.
- Some computer applications including many antivirus applications, allow user to adjust various application settings in order to control execution of program tasks. These changes to the application settings may affect system resource utilization, including processor, memory, hard drive and network utilization. In some instances, changes to the application settings may overload the computer system and impair its performance. Accordingly, there is a need for a technique for assessing effects of different program settings on a computer system and for dynamically adjusting program settings in order to improve system resource utilization.
- a method comprises collecting from a computer system configuration and performance information for one or more computer system components, including hardware and software components.
- the method further includes rating performance of the components of the computer system based on the collected configuration and performance information.
- the performance rating of the component may be computed as a function of the component's performance characteristic and one or more technical characteristics.
- the component's performance rating may be adjusted by a weighting coefficient to account for the relative costs between different components of the computer system, interoperability between different system components, or effect of the computer's operating system on the performance of system components.
- the method further includes computing an overall performance rating of the computer system by, for example, applying fuzzy logic rules to the performance ratings of the individual system components.
- the method further includes selecting based on the system performance rating one of a plurality of predefined operational policies for a program to be executed on the computer system.
- the operational policy specifies program settings and limits of system resource utilization by the program on the computer system.
- the method further includes monitoring system resource utilization by the program being executed on the computer system to determine whether system resource utilization exceeds the limit specified in the selected operational policy. If the system resource utilization exceeds the specified limit, the method selects another policy specifying different program settings and a different limit of system resource utilization. If the system resource utilization exceeds the limits specified in all predefined operational policies, the method creates in real-time a custom operational policy for the program.
- the custom policy specifies different program settings that minimize resource utilization on the computer system.
- FIG. 1 illustrates a schematic block diagram of a system for adaptive policy-based program configuration in accordance with one example embodiment.
- FIG. 2 illustrates a methodology for adaptive policy-based program configuration in accordance with one example embodiment.
- FIG. 3 illustrates a methodology for adaptive policy-based program configuration in accordance with another example embodiment.
- FIG. 4 illustrates a data structure for storing policy information in accordance with one example embodiment.
- FIG. 5 illustrates a data structure for storing policy information in accordance with another example embodiment.
- FIG. 6 illustrates a schematic block diagram of a computer system in accordance with one example embodiment.
- Example embodiments are described herein in the context of systems, methods and computer program products for adaptive policy-based program configuration. Those of ordinary skill in the art will realize that the following description is illustrative only and is not intended to be in any way limiting. Other embodiments will readily suggest themselves to those skilled in the art having the benefit of this disclosure. Reference will now be made in detail to implementations of the example embodiments as illustrated in the accompanying drawings. The same reference indicators will be used to the extent possible throughout the drawings and the following description to refer to the same or like items.
- FIG. 1 illustrates a schematic block diagram of a system for adaptive policy-based program configuration in accordance with one example embodiment.
- System 100 includes one or more computers 105 , each having a plurality of applications 110 and associates settings 111 , 112 , etc.
- Computer 105 may be a home PC, a notebook, a thin or thick client office computer, a gaming PC, an application server or other type of programmable machine.
- Computers 105 may be connected into a local area network (not shown).
- Applications 110 may include computer programs, scripts, codes, plug-ins and other types of computer-executable instructions.
- application 110 A includes an antivirus program.
- Program settings 111 , 112 , etc. are used to control operation of applications 110 .
- program settings include malware scanning settings, such as day/time setting indicating start of malware scan, scan duration setting, hardware scan settings, software scan settings and other.
- system 100 further includes one or more local software agents 120 .
- Software agent 120 may be implemented as a stand-alone program, as a script or other type of executable, compilable or interpretable instructions.
- Software agents 120 may be directly deployed on computers 110 or other network devices connected via network to computers 105 .
- Software agents 120 performs the following functions: collecting system configuration information from computers 105 , monitoring system resource utilization during execution of applications 110 on computers 105 , and adjusting program setting 111 , 112 , etc. in order to improve system resource utilization and overall performance of computer(s) 105 .
- system 100 also includes a rating engine 130 and a rating database 140 .
- Rating engine 130 and database 140 may reside on a separate network device, such as a local or remote application server. Alternatively, rating engine 130 and database 140 may be deployed on the same system or the same network as software agent 120 .
- rating engine 130 performs the following functions: deploying software agent 120 on computer(s) 105 , receiving computer configuration and resource utilization information from the software agent, rating performance of computer(s) 105 , classifying the computer(s) 105 based on its performance rating.
- database 140 contains fuzzy logic rules for determining performance rating of computer(s) 105 .
- system 100 also includes a policy engine 150 and policy database 160 .
- Policy engine 150 and database 160 may reside on a separate network device, such as a local or remote application server. Alternatively, policy engine 150 and database 160 may be deployed on the same system or the same network as software agent 120 .
- policy engine 150 performs the following functions: maintaining predefined computer classifications, maintaining predefine operational policies specifying program settings for applications 110 , and generating custom operational policies for computer(s) 105 .
- database 160 contains predefined operational policies for applications 110 for various computer classes, as well as custom policies.
- system 100 may further include a remote server 170 hosted by a provider of the policy-based configuration service.
- Remote server 170 provides software upgrades as well as updated information about new software and hardware components, fuzzy logic rules, computer classifications, operational policy definitions and other information. It should be noted that depicted system configuration is not limiting, other software and hardware components as well as databases may be used in various embodiments.
- software agent 120 may be configured to auto start upon boot-up of computer 105 .
- agent 120 may be activated by the computer user, system administrator, rating engine 130 , policy engine 150 or one of the applications 110 , such as an antivirus application. Once activated, agent 120 begins collecting from computer(s) 105 system configuration information, including hardware and software information.
- Hardware configuration information may include, but is not limited to information about CPU, operating memory, hard disk drive(s) and network interfaces.
- the software configuration information may include, but is not limited to the information about operating system, software applications, programs, scripts and processes running on computer(s) 105 .
- Software agent 120 may also collect other system information, such as registry data, that indicates which applications, programs and processes are running on computer 105 . Software agent 120 then forwards the collected system configuration information to rating engine 130 and policy engine 150 .
- performance rating engine 130 conducts performance analysis and rating of computer(s) 105 .
- FIG. 2 illustrates an example performance rating algorithm implemented by rating engine 130 .
- rating engine 130 obtains from software agent 120 configuration information about computer(s) 105 , such as information about computer's CPU, operating memory, hard disk drive (HDD), network interface(s) and operating system (OS).
- CPU information may include, for example, number of processor cores, operational frequency, processor architecture, and its performance statistics.
- Information about operating memory may include RAM's size and bandwidth.
- Information about hard disk drive may also include its size and bandwidth.
- Network information may include its type, e.g., wired or wireless, and actual bandwidth. Performance of each system component, such as its actual bandwidth, may be measured by a benchmark and diagnostic utility, such as HD Tune, PCMark Vantage, 3DMark Vantage or other system analysis software utilized by engine 130 .
- rating engine 130 computes individual performance ratings for components of computer(s) 105 .
- rating engine 130 may use only one technical characteristic to rate performance of component of computer(s) 105 .
- operating memory's performance may be rated based only on its size, which is measured in Megabytes.
- Network interface's performance may be rated based on its actual bandwidth, which is measured in Megabits per second.
- rating engine 130 may compute performance rating as a function of several different technical characteristics.
- CPU's performance may be rated as a function of a coefficient of the number of its cores multiplied by its operating frequency and further multiplied by a coefficient of its architecture.
- HDD's performance may be rated as a function of its size multiplied by a coefficient of its actual measured bandwidth.
- Other functions and coefficients may be used in various embodiments.
- rating engine 130 may account for relative “cost” of one system component with respect to other system components. For example, CPU time may have lower “cost” because modern multi-core processors with high operating frequencies (several Gigahertz) perform resource-intensive computational operations very fast, but access time to a hard disk drive, which provides data to the CPU, may have a much higher “cost” because HDDs usually have much smaller bandwidth (several Megabytes per second). This may cause processor-memory bottleneck during execution of certain tasks by applications 110 that impairs overall system performance.
- rating engine 130 may also account for known or likely interoperability problems between various system components that may affect overall system performance. Yet in another example, rating engine 130 may also account for affects of operating system on the overall system performance, because different operating systems control system resource allocation differently. To account for the effects of these and other factors, rating engine 130 may applying various weighting coefficients to the performance ratings of individual system components and/or to the overall performance rating of computer 105 .
- rating engine 130 may compute an overall system performance rating for computer(s) 105 .
- overall system performance rating may be expressed as a string of weighted performance rating coefficients of individual system components, which can be expressed in the following format: CPU/RAM/HDD/Network.
- CPU/RAM/HDD/Network For example, for a computer having the following technical characteristics: Pentium 4 3 Ghz/512 Mb/500 GB 7200 RPM/10 Mbit/s, the overall system performance rating may be expressed as follows: 3000/512/65000/10000.
- CPU performance rating coefficient 3000 represents Pentium 4 3 Ghz
- RAM performance rating coefficient 512 represents 512 Mb of memory
- HDD performance rating coefficient 65000 represents a 500 GB hard disk drive (this rating has been weighted by a coefficient of 1.3 to account for lower “cost” of data access time due to high RPM of this hard disk drive)
- network performance rating coefficient 10000 represents 10 Mb/s Ethernet.
- the overall system performance rating may be expressed as follows: 10000/4096/200000/30000.
- CPU performance rating coefficient 10000 represents 2.66 Gz Core i7 processor (this rating was weighted by coefficient of 3.5 account for multi-core and hyper-threading technologies utilized in this processor, which significantly increases its performance);
- RAM performance rating coefficient 4096 represents 4096 MB of RAM;
- HDD performance rating 200000 represents 160 GB HDD (this rating was weighted by a coefficient of 12.5 to account for very low “cost” of access time to the data stored on a solid-state drive);
- network rating 30000 represents 10 Mbit/sec optical network interface.
- rating engine 130 may uses fuzzy logic to determine overall system performance rating based on performance ratings of individual system components in accordance with one example embodiment.
- rating engine 130 performs fuzzification—translation of non-fuzzy quantitative performance rating(s) of individual components CPU/RAM/HDD/Network to fuzzy logic linguistic variables.
- linguistic variable for individual component performance rating may have five associated linguistic values, such as “very low”, “low”, “average”, “high”, and “very high”.
- rating engine 130 applies fuzzy logic rules to the linguistic values of performance ratings of individual system components. These rules are stored in database 140 and frequently updated to account for newly developed and commercially available computer components.
- rating engine 130 may apply component-specific fuzzy logic rules to determine a fuzzy logic values for the overall system performance rating variable.
- the fuzzy logic rules may have an IF-THEN format.
- component-specific fuzzy logic rules may state “IF processor rating is high THEN overall system performance rating is high” or “IF operating memory is very low THEN overall system performance rating is very low”.
- rating engine 130 may apply composite fuzzy logic rules that account for several different performance ratings.
- composite fuzzy logic rules may state “IF processor rating is very high AND operating memory is high AND hard disk drive rating is high AND network rating is medium THEN overall system performance rating is high” or “IF processor rating is very high AND operating memory is medium AND hard disk drive rating is high AND network rating is high THEN overall system performance rating is medium”. Therefore, the fuzzy logic rules provide fuzzy logic values, such as “very low”, “low”, “average”, “high”, and “very high”, for the overall system performance rating variable.
- rating engine 130 performs defuzzification—translation of fuzzy logic linguistic values to non-fuzzy quantitative values, which represent the overall system performance rating(s) for computer(s) 105 .
- the complex process of calculating the output value takes into account what fuzzy logic rules were applied at step 240 , what degree of affiliation between performance ratings of individual system components and other criteria known in the art.
- rating engine 130 may apply Mamdani and Sugeno fuzzy logic algorithms along with centroid defuzzification techniques. It should be noted that other known defuzzification algorithms and techniques may be used in alternative embodiments to calculate the overall system performance rating(s) for computer(s) 105 .
- rating engine 130 may classify computer(s) 105 into one of several predefined computer classes based on overall performance rating of each computer 105 .
- the computer classification may include, but is not limited to the following classes of computer systems: thin client computer, notebook computer, thick client computer, gaming computer and network server.
- rating engine 130 may classify computers having very low performance rating of 1000, such as think client computers, weak office PCs, tablet computers, netbooks, PDAs, mobile phones, as thin client computers.
- Computers having low performance rating of 2000 may be classified as notebook computers.
- Computers having medium performance rating of 3000, such as thick client computer and home or office PCs, may be classified as thick client computers.
- Computers having high performance rating of 4000 may be, classified as powerful gaming PCs.
- Computers having very high performance rating 5000 may be classified as powerful network servers. It should be noted that this classification is not limiting and fewer or more classes of computer systems may be created in alternative embodiments to allow greater or lower degree of granularity of system classifications.
- rating engine 130 may pass computer classification information to policy engine 150 , which may select an appropriate operational policy for application(s) 110 .
- FIG. 3 illustrates an example policy selection algorithm implemented by policy engine 150 .
- policy engine 150 selects an operation policy for application(s) 110 from a set of predefined operational policies.
- Policies specify program settings 111 , 112 , etc. that optimize performance of computers(s) 105 by liming system resource utilization by applications 110 . Relationship between program settings and system resource utilization may be illustrated in the following example of an antivirus program.
- HIPS HyperText-Based Intrusion Prevention System
- policy engine 150 may control settings of the antivirus program using different operational policies that limit system resource utilization by the antivirus program, while assuring maximum possible antivirus protection of the computers system 105 .
- FIG. 4 depicts an example embodiment of a policy table 400 for application 110 A, such as an antivirus application.
- Table 400 includes several different policies specifying different program settings and limits of system resource utilization by application 110 A.
- antivirus program settings may include, but not limited to, day/time setting indicating start of malware scan by the antivirus program 110 A, duration of the scan settings, hardware scan settings, and software scan settings.
- System resource utilization limits may be represented in the following format:
- CPU 1 /RAM 1 /HDD 1 /NET 1 where parameter CPU 1 represents limit of processor utilization, RAM 1 represents limit of operating memory utilization, HDD 1 represents limit, of hard disk drive utilization, and NET 1 represents limit of network utilization by application 110 A.
- Limits of system resource utilization for different policies may be expressed as percentages of total resource utilization. For example, policy 1 may specify that system resource utilization limits are 20%/15%/20%/25%. Policy 2 may specify that system resource utilization limits are 35%/25%/25%/30%. Policy 3 may specify that resource utilization limits are 55%/50%/45%/55%. Therefore, operational policy 3 is more intensive policy than operation policy 2 , and policy 1 is the most relaxed policy, because it results in light resource utilization.
- FIG. 5 depicts another example embodiment of a policy table 500 for application 110 A, such as an antivirus application.
- table 500 includes four different policies associated with different classes of computers.
- operational policy 1 imposes light load on computer 105 (e.g., resource utilization 20%/15%/20%/25%), because only a few basic functions of the antivirus program are activated under this policy with negligible effect on system performance.
- policy 4 imposes the heaviest load on computer 105 (e.g., resource utilization 65%/75%/70%/65%), because all functions of the antivirus program may be activated under this policy with a significant effect on system performance.
- policy engine 150 may select the most suitable operational policy for applications 110 running on computer(s) 105 .
- policy engine 150 is configured to automatically select the most stringent operational policy for the system class with which computer 105 is associated in order to maximize the number of tasks performed by the application(s) 110 .
- the most stringent operation policy provides the most thorough antivirus scan of the entire computer 105 , which results in the highest level of system protection against viruses.
- policy engine 150 may utilize fuzzy logic to select the most appropriate operational policy for application(s) 110 .
- fuzzy logic rules may be used to assess the tasks performed by the application and their effect on system performance, and to select appropriate program settings that would not overload computer(s) 105 .
- policy engine 150 instructs software agent 120 , at step 320 , to apply the selected policy to the application 110 and begin to monitor system resource utilization by application 110 to assure that resource utilization is within limits specified by the selected policy. If at step 330 , software agent 120 determines that system resource utilization does not exceed the limit specified in the selected policy, at step 340 , it continues to execute the existing policy. However, if system resource utilization begins to exceed the specified limits, software agent 120 may instruct policy engine 150 to select another predefined policy at step 350 .
- policy engine 150 may provide policy 2 , which has less intensive system utilization requirements and in which some functions of the software may be deactivated or performed during different time, so as to decrease load on computer system 105 .
- policy engine 150 may provide policy 2 , which has less intensive system utilization requirements and in which some functions of the software may be deactivated or performed during different time, so as to decrease load on computer system 105 .
- a new policy may limit antivirus scan to certain sectors of hard disk drive, therefore limiting load on that system component.
- the new policy may specify that certain antivirus scans must be performed during off hours, such as at night, when this scan does not interfere with activities of system users during the day.
- software agent 120 Having selected a new policy for application 110 , software agent 120 continues to monitor system resource utilization by the application, and, if it determines that system resource utilization does not exceed the new limit specified in the selected policy, it continues to execute the new policy. However, if system resource utilization begins to exceed the specified limits again, software agent 120 may instruct policy engine 150 to select another predefined policy. If at step 360 , it is determined that no more predefined policies are available for the computer class within which computer 105 was assigned, software agent 120 may collect all available system configuration and resource utilization information about computer 105 and forward it to policy engine 150 . Policy engine 105 in turn uses the collected information to create a custom policy for application 110 , such as an antivirus program. In one example embodiment, policy engine 150 may contact remote server 170 to request administrator's assistance in generation of custom operational policies for application 110 , which will improve system performance.
- FIG. 6 depicts an exemplary computer system 5 , which can be used to implement computer 105 , in accordance with one example embodiment. It should be noted that computer system 5 may also be used to implement a desktop computer, a workstation, a laptop computer, an application server or other type of data processing device. As depicted, computer system 5 includes CPU 15 , system memory 20 , hard disk drive(s) 30 , optical drive(s) 35 , serial port(s) 40 , graphics card 45 , audio card 50 and network card(s) 55 connected by system bus 10 .
- System bus 10 may be any of several types of bus structures including a memory bus or memory controller, a peripheral bus and a local bus using any of a variety of known bus architectures.
- CPU 15 may include Intel® Core 2 Quad 2.33 GHz processor or other type of microprocessor.
- System memory 20 includes a read-only memory (ROM) 21 and random access memory (RAM) 23 .
- Memory 20 may be implemented as in DRAM (dynamic RAM), EPROM, EEPROM, Flash or other type of memory architecture.
- ROM 21 stores a basic input/output system 22 (BIOS), containing the basic routines that help to transfer information between the components of computer system 5 , such as during start-up.
- BIOS basic input/output system 22
- RAM 23 stores operating system 24 (OS), such as Windows® Vista® or other type of OS, that is responsible for management and coordination of processes and allocation and sharing of hardware resources in computer system 5 .
- OS operating system 24
- System memory 20 also stores applications and programs 25 that are currently running on the computer 5 , including an antivirus application and various other programs.
- System memory 20 also stores various runtime data 26 used by the applications and programs 25 .
- Computer system 5 may further include hard disk drive(s) 30 , such as 500 GB SATA magnetic hard drive, and optical disk drive(s) 35 for reading from or writing to a removable optical disk, such as a CD-ROM, DVD-ROM or other optical media.
- Hard disk drive(s) 30 such as 500 GB SATA magnetic hard drive
- optical disk drive(s) 35 for reading from or writing to a removable optical disk, such as a CD-ROM, DVD-ROM or other optical media.
- Drives 30 and 25 and their associated computer-readable media provide non-voltile storage of computer readable instructions, data structures, applications and program modules/subroutines that implement algorithms and methods disclosed herein.
- exemplary computer system 5 employs magnetic and optical disks
- other types of computer readable media that can store data accessible by a computer 5 , such as magnetic cassettes, flash memory cards, digital video disks, RAMs, ROMs, EPROMs and other types of memory may also be used in alternative embodiments of the computer system.
- Computer system 5 further includes a plurality of serial ports 40 , such as Universal Serial Bus (USB), for connecting data input device(s) 75 , such as keyboard, mouse, touch pad and other. Serial ports 40 may be also be used to connect data output device(s) 80 , such as printer, scanner and other, as well as other peripheral device(s) 85 , such as external data storage devices and the like. Computer system 5 may also include graphics card 45 , such as nVidia® GeForce® GT 240M or other video card, for interfacing with a monitor 60 or other video reproduction device. Computer system 5 may also include an audio card 50 for reproducing sound via internal or external speakers 65 . In addition, computer system 5 may include network card(s) 55 , such as Ethernet, WiFi, GSM, Bluetooth or other wired, wireless, or cellular network interface for connecting computer system 5 to network 70 , such as the Internet.
- USB Universal Serial Bus
- Serial ports 40 may be also be used to connect data output device(s) 80 , such as printer, scanner and other, as well as other
- a component may be, but is not limited to being, a process running on a processor, a processor, an object, an executable, a thread of execution, a program, and/or a computer.
- an application running on a computing device and the computing device can be a component.
- One or more components can reside within a process and/or thread of execution and a component may be localized on one computer and/or distributed between two or more computers.
- these components can execute from various non-transitory computer-readable medium having various data structures stored thereon.
- the components may communicate by way of local and/or remote processes such as in accordance with a signal having one or more data packets, such as data from one component interacting with another component in a local system and/or across a network, such as the Internet with other systems.
- Computer-readable media includes both computer storage media and communication media including any medium that facilitates transfer of a computer program from one place to another.
- a storage medium may be any available media that can be accessed by a computer.
- such computer-readable media can comprise RAM, ROM, EEPROM, CD-ROM or other optical disk storage, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and that can be accessed by a computer.
- any connection may be termed a computer-readable medium.
- a computer-readable medium includes compact disc (CD), laser disc, optical disc, digital versatile disc (DVD), floppy disk and Blu-ray® disc where disks usually reproduce data magnetically, while discs usually reproduce data optically with lasers. Combinations of the above should also be included within the scope of computer-readable media.
Abstract
Description
- This application is a continuation of U.S. application Ser. No. 12/892,678, filed on Sep. 28, 2010, which claims benefit of priority under 35 U.S.C. 119(a)-(d) to a Russian Application No. 2010119565, filed on May 18, 2010, both of which are incorporated by reference herein in their entirety.
- The present disclosure relates generally to the field of computer science and, in particular, to systems, methods and computer program products for adaptive policy-based program configuration for improving computer performance and resource utilization.
- Generally, modern computer applications are very resource intensive because they interact extensively with hardware and software components of computer systems on which they run. Despite the fact that developers constantly improve operation of these applications and their interaction with computer systems, the demand for system resources continues to grow steadily as the complexity of these applications increases. An example of resource-demanding applications is antivirus applications. Antivirus applications interact extensively with system's software and hardware components during system scans for malicious software, such as viruses, worms, spyware and other types of malware that threatens security of the computer system.
- Some computer applications, including many antivirus applications, allow user to adjust various application settings in order to control execution of program tasks. These changes to the application settings may affect system resource utilization, including processor, memory, hard drive and network utilization. In some instances, changes to the application settings may overload the computer system and impair its performance. Accordingly, there is a need for a technique for assessing effects of different program settings on a computer system and for dynamically adjusting program settings in order to improve system resource utilization.
- Disclosed herein are systems, methods and computer program products for adaptive policy-based program configuration. In one example embodiment, a method comprises collecting from a computer system configuration and performance information for one or more computer system components, including hardware and software components. The method further includes rating performance of the components of the computer system based on the collected configuration and performance information. The performance rating of the component may be computed as a function of the component's performance characteristic and one or more technical characteristics. The component's performance rating may be adjusted by a weighting coefficient to account for the relative costs between different components of the computer system, interoperability between different system components, or effect of the computer's operating system on the performance of system components. The method further includes computing an overall performance rating of the computer system by, for example, applying fuzzy logic rules to the performance ratings of the individual system components.
- The method further includes selecting based on the system performance rating one of a plurality of predefined operational policies for a program to be executed on the computer system. The operational policy specifies program settings and limits of system resource utilization by the program on the computer system. The method further includes monitoring system resource utilization by the program being executed on the computer system to determine whether system resource utilization exceeds the limit specified in the selected operational policy. If the system resource utilization exceeds the specified limit, the method selects another policy specifying different program settings and a different limit of system resource utilization. If the system resource utilization exceeds the limits specified in all predefined operational policies, the method creates in real-time a custom operational policy for the program. The custom policy specifies different program settings that minimize resource utilization on the computer system.
- The above simplified summary of example embodiments of the invention serves to provide a basic understanding of such embodiments. This summary is not an extensive overview of all contemplated aspects of the invention, and is intended to neither identify key or critical elements of all embodiments nor delineate the scope of any or all embodiments. Its sole purpose is to present some concepts of one or more aspects in a simplified form as a prelude to the more detailed description that follows. To the accomplishment of the foregoing and related ends, the one or more embodiments comprise the features hereinafter fully described and particularly pointed out in the claims. The following description and the annexed drawings set forth in detail certain illustrative features of the one or more embodiments. These features are indicative, however, of but a few of the various ways in which the principles of various aspects may be employed, and this description is intended to include all such aspects and their equivalents.
- The accompanying drawings, which are incorporated into and constitute a part of this specification, illustrate one or more example embodiments of the invention and, together with the detailed description serve to explain the principles and implementations of the embodiments.
- In the drawings:
-
FIG. 1 illustrates a schematic block diagram of a system for adaptive policy-based program configuration in accordance with one example embodiment. -
FIG. 2 illustrates a methodology for adaptive policy-based program configuration in accordance with one example embodiment. -
FIG. 3 illustrates a methodology for adaptive policy-based program configuration in accordance with another example embodiment. -
FIG. 4 illustrates a data structure for storing policy information in accordance with one example embodiment. -
FIG. 5 illustrates a data structure for storing policy information in accordance with another example embodiment. -
FIG. 6 illustrates a schematic block diagram of a computer system in accordance with one example embodiment. - Example embodiments are described herein in the context of systems, methods and computer program products for adaptive policy-based program configuration. Those of ordinary skill in the art will realize that the following description is illustrative only and is not intended to be in any way limiting. Other embodiments will readily suggest themselves to those skilled in the art having the benefit of this disclosure. Reference will now be made in detail to implementations of the example embodiments as illustrated in the accompanying drawings. The same reference indicators will be used to the extent possible throughout the drawings and the following description to refer to the same or like items.
-
FIG. 1 illustrates a schematic block diagram of a system for adaptive policy-based program configuration in accordance with one example embodiment. System 100 includes one ormore computers 105, each having a plurality of applications 110 and associates settings 111, 112, etc.Computer 105 may be a home PC, a notebook, a thin or thick client office computer, a gaming PC, an application server or other type of programmable machine.Computers 105 may be connected into a local area network (not shown). Applications 110 may include computer programs, scripts, codes, plug-ins and other types of computer-executable instructions. In one example embodiment,application 110A includes an antivirus program. Program settings 111, 112, etc. are used to control operation of applications 110. In case of an antivirus program, program settings include malware scanning settings, such as day/time setting indicating start of malware scan, scan duration setting, hardware scan settings, software scan settings and other. - In one example embodiment, system 100 further includes one or more
local software agents 120.Software agent 120 may be implemented as a stand-alone program, as a script or other type of executable, compilable or interpretable instructions.Software agents 120 may be directly deployed on computers 110 or other network devices connected via network tocomputers 105.Software agents 120 performs the following functions: collecting system configuration information fromcomputers 105, monitoring system resource utilization during execution of applications 110 oncomputers 105, and adjusting program setting 111, 112, etc. in order to improve system resource utilization and overall performance of computer(s) 105. - In one example embodiment, system 100 also includes a
rating engine 130 and arating database 140.Rating engine 130 anddatabase 140 may reside on a separate network device, such as a local or remote application server. Alternatively,rating engine 130 anddatabase 140 may be deployed on the same system or the same network assoftware agent 120. In one example embodiment,rating engine 130 performs the following functions: deployingsoftware agent 120 on computer(s) 105, receiving computer configuration and resource utilization information from the software agent, rating performance of computer(s) 105, classifying the computer(s) 105 based on its performance rating. In one example embodiment,database 140 contains fuzzy logic rules for determining performance rating of computer(s) 105. - In one example embodiment, system 100 also includes a
policy engine 150 andpolicy database 160.Policy engine 150 anddatabase 160 may reside on a separate network device, such as a local or remote application server. Alternatively,policy engine 150 anddatabase 160 may be deployed on the same system or the same network assoftware agent 120. In one example embodiment,policy engine 150 performs the following functions: maintaining predefined computer classifications, maintaining predefine operational policies specifying program settings for applications 110, and generating custom operational policies for computer(s) 105. In one example embodiment,database 160 contains predefined operational policies for applications 110 for various computer classes, as well as custom policies. - In one example embodiment, system 100 may further include a
remote server 170 hosted by a provider of the policy-based configuration service.Remote server 170 provides software upgrades as well as updated information about new software and hardware components, fuzzy logic rules, computer classifications, operational policy definitions and other information. It should be noted that depicted system configuration is not limiting, other software and hardware components as well as databases may be used in various embodiments. - In one example embodiment,
software agent 120 may be configured to auto start upon boot-up ofcomputer 105. Alternatively,agent 120 may be activated by the computer user, system administrator,rating engine 130,policy engine 150 or one of the applications 110, such as an antivirus application. Once activated,agent 120 begins collecting from computer(s) 105 system configuration information, including hardware and software information. Hardware configuration information may include, but is not limited to information about CPU, operating memory, hard disk drive(s) and network interfaces. The software configuration information may include, but is not limited to the information about operating system, software applications, programs, scripts and processes running on computer(s) 105.Software agent 120 may also collect other system information, such as registry data, that indicates which applications, programs and processes are running oncomputer 105.Software agent 120 then forwards the collected system configuration information torating engine 130 andpolicy engine 150. - In one example embodiment,
performance rating engine 130 conducts performance analysis and rating of computer(s) 105.FIG. 2 illustrates an example performance rating algorithm implemented byrating engine 130. As shown, atstep 210,rating engine 130 obtains fromsoftware agent 120 configuration information about computer(s) 105, such as information about computer's CPU, operating memory, hard disk drive (HDD), network interface(s) and operating system (OS). CPU information may include, for example, number of processor cores, operational frequency, processor architecture, and its performance statistics. Information about operating memory may include RAM's size and bandwidth. Information about hard disk drive may also include its size and bandwidth. Network information may include its type, e.g., wired or wireless, and actual bandwidth. Performance of each system component, such as its actual bandwidth, may be measured by a benchmark and diagnostic utility, such as HD Tune, PCMark Vantage, 3DMark Vantage or other system analysis software utilized byengine 130. - To rate overall system performance, at
step 220,rating engine 130 computes individual performance ratings for components of computer(s) 105. Generally, the higher are the technical characteristics and performance of a system components, the higher is its performance rating. For some system components,rating engine 130 may use only one technical characteristic to rate performance of component of computer(s) 105. For example, operating memory's performance may be rated based only on its size, which is measured in Megabytes. Network interface's performance may be rated based on its actual bandwidth, which is measured in Megabits per second. For other system components,rating engine 130 may compute performance rating as a function of several different technical characteristics. For example, CPU's performance may be rated as a function of a coefficient of the number of its cores multiplied by its operating frequency and further multiplied by a coefficient of its architecture. HDD's performance may be rated as a function of its size multiplied by a coefficient of its actual measured bandwidth. Other functions and coefficients may be used in various embodiments. - It should be noted that performance ratings of individual system components are highly relative and depend on various factors selected by
rating engine 130. In one example embodiment,rating engine 130 may account for relative “cost” of one system component with respect to other system components. For example, CPU time may have lower “cost” because modern multi-core processors with high operating frequencies (several Gigahertz) perform resource-intensive computational operations very fast, but access time to a hard disk drive, which provides data to the CPU, may have a much higher “cost” because HDDs usually have much smaller bandwidth (several Megabytes per second). This may cause processor-memory bottleneck during execution of certain tasks by applications 110 that impairs overall system performance. In another example,rating engine 130 may also account for known or likely interoperability problems between various system components that may affect overall system performance. Yet in another example,rating engine 130 may also account for affects of operating system on the overall system performance, because different operating systems control system resource allocation differently. To account for the effects of these and other factors,rating engine 130 may applying various weighting coefficients to the performance ratings of individual system components and/or to the overall performance rating ofcomputer 105. - As indicated above, based on the weighted performance ratings of individual system components,
rating engine 130 may compute an overall system performance rating for computer(s) 105. In one example embodiment, overall system performance rating may be expressed as a string of weighted performance rating coefficients of individual system components, which can be expressed in the following format: CPU/RAM/HDD/Network. For example, for a computer having the following technical characteristics:Pentium 4 3 Ghz/512 Mb/500 GB 7200 RPM/10 Mbit/s, the overall system performance rating may be expressed as follows: 3000/512/65000/10000. In this overall system performance rating, CPU performance rating coefficient 3000 representsPentium 4 3 Ghz; RAM performance rating coefficient 512 represents 512 Mb of memory; HDD performance rating coefficient 65000 represents a 500 GB hard disk drive (this rating has been weighted by a coefficient of 1.3 to account for lower “cost” of data access time due to high RPM of this hard disk drive); and network performance rating coefficient 10000 represents 10 Mb/s Ethernet. In another example, for a computer having the following configuration: Core i7 2.66 Ghz/4096 MB/SSD 160 GB/30 Mbit/sec, the overall system performance rating may be expressed as follows: 10000/4096/200000/30000. In this overall system performance rating, CPU performance rating coefficient 10000 represents 2.66 Gz Core i7 processor (this rating was weighted by coefficient of 3.5 account for multi-core and hyper-threading technologies utilized in this processor, which significantly increases its performance); RAM performance rating coefficient 4096 represents 4096 MB of RAM; HDD performance rating 200000 represents 160 GB HDD (this rating was weighted by a coefficient of 12.5 to account for very low “cost” of access time to the data stored on a solid-state drive); network rating 30000 represents 10 Mbit/sec optical network interface. - With reference to
FIG. 2 , at steps 230-250,rating engine 130 may uses fuzzy logic to determine overall system performance rating based on performance ratings of individual system components in accordance with one example embodiment. In particular, atstep 230,rating engine 130 performs fuzzification—translation of non-fuzzy quantitative performance rating(s) of individual components CPU/RAM/HDD/Network to fuzzy logic linguistic variables. For example, linguistic variable for individual component performance rating may have five associated linguistic values, such as “very low”, “low”, “average”, “high”, and “very high”. - Next, at
step 240,rating engine 130 applies fuzzy logic rules to the linguistic values of performance ratings of individual system components. These rules are stored indatabase 140 and frequently updated to account for newly developed and commercially available computer components. In one embodiment,rating engine 130 may apply component-specific fuzzy logic rules to determine a fuzzy logic values for the overall system performance rating variable. The fuzzy logic rules may have an IF-THEN format. For example, component-specific fuzzy logic rules may state “IF processor rating is high THEN overall system performance rating is high” or “IF operating memory is very low THEN overall system performance rating is very low”. In another embodiment,rating engine 130 may apply composite fuzzy logic rules that account for several different performance ratings. For example, composite fuzzy logic rules may state “IF processor rating is very high AND operating memory is high AND hard disk drive rating is high AND network rating is medium THEN overall system performance rating is high” or “IF processor rating is very high AND operating memory is medium AND hard disk drive rating is high AND network rating is high THEN overall system performance rating is medium”. Therefore, the fuzzy logic rules provide fuzzy logic values, such as “very low”, “low”, “average”, “high”, and “very high”, for the overall system performance rating variable. - Next, at
step 250,rating engine 130 performs defuzzification—translation of fuzzy logic linguistic values to non-fuzzy quantitative values, which represent the overall system performance rating(s) for computer(s) 105. The complex process of calculating the output value takes into account what fuzzy logic rules were applied atstep 240, what degree of affiliation between performance ratings of individual system components and other criteria known in the art. In one example embodiment,rating engine 130 may apply Mamdani and Sugeno fuzzy logic algorithms along with centroid defuzzification techniques. It should be noted that other known defuzzification algorithms and techniques may be used in alternative embodiments to calculate the overall system performance rating(s) for computer(s) 105. - Finally, at
step 260,rating engine 130 may classify computer(s) 105 into one of several predefined computer classes based on overall performance rating of eachcomputer 105. The computer classification may include, but is not limited to the following classes of computer systems: thin client computer, notebook computer, thick client computer, gaming computer and network server. In particular,rating engine 130 may classify computers having very low performance rating of 1000, such as think client computers, weak office PCs, tablet computers, netbooks, PDAs, mobile phones, as thin client computers. Computers having low performance rating of 2000 may be classified as notebook computers. Computers having medium performance rating of 3000, such as thick client computer and home or office PCs, may be classified as thick client computers. Computers having high performance rating of 4000 may be, classified as powerful gaming PCs. Computers having very high performance rating 5000 may be classified as powerful network servers. It should be noted that this classification is not limiting and fewer or more classes of computer systems may be created in alternative embodiments to allow greater or lower degree of granularity of system classifications. - Once computer(s) 105 have been classified,
rating engine 130 may pass computer classification information topolicy engine 150, which may select an appropriate operational policy for application(s) 110.FIG. 3 illustrates an example policy selection algorithm implemented bypolicy engine 150. As shown, atstep 310,policy engine 150 selects an operation policy for application(s) 110 from a set of predefined operational policies. Policies specify program settings 111, 112, etc. that optimize performance of computers(s) 105 by liming system resource utilization by applications 110. Relationship between program settings and system resource utilization may be illustrated in the following example of an antivirus program. For example, activation of HIPS (Host-Based Intrusion Prevention System) settings ofantivirus program 110A significantly loads processor ofcomputer 105, while full antivirus scan of a hard disk drive significantly loads computer's disk system. Therefore, in the first case, processor utilization will be significantly increased and, in the second case, had disk drive utilization will be increased. Accordingly, to optimize performance of the computer system on which antivirus program executes,policy engine 150 may control settings of the antivirus program using different operational policies that limit system resource utilization by the antivirus program, while assuring maximum possible antivirus protection of thecomputers system 105. -
FIG. 4 depicts an example embodiment of a policy table 400 forapplication 110A, such as an antivirus application. Different applications will have different policy tables. Table 400 includes several different policies specifying different program settings and limits of system resource utilization byapplication 110A. For example, antivirus program settings may include, but not limited to, day/time setting indicating start of malware scan by theantivirus program 110A, duration of the scan settings, hardware scan settings, and software scan settings. System resource utilization limits may be represented in the following format: - CPU1/RAM1/HDD1/NET1, where parameter CPU1 represents limit of processor utilization, RAM1 represents limit of operating memory utilization, HDD1 represents limit, of hard disk drive utilization, and NET1 represents limit of network utilization by
application 110A. Limits of system resource utilization for different policies may be expressed as percentages of total resource utilization. For example,policy 1 may specify that system resource utilization limits are 20%/15%/20%/25%.Policy 2 may specify that system resource utilization limits are 35%/25%/25%/30%.Policy 3 may specify that resource utilization limits are 55%/50%/45%/55%. Therefore,operational policy 3 is more intensive policy thanoperation policy 2, andpolicy 1 is the most relaxed policy, because it results in light resource utilization. - In one example embodiment, different operational policies may apply to different classes of computers.
FIG. 5 depicts another example embodiment of a policy table 500 forapplication 110A, such as an antivirus application. As shown, table 500 includes four different policies associated with different classes of computers. As described in example above,operational policy 1 imposes light load on computer 105 (e.g.,resource utilization 20%/15%/20%/25%), because only a few basic functions of the antivirus program are activated under this policy with negligible effect on system performance. At the other end of the spectrum,policy 4 imposes the heaviest load on computer 105 (e.g.,resource utilization 65%/75%/70%/65%), because all functions of the antivirus program may be activated under this policy with a significant effect on system performance. However, as noted above, different classes of computer systems have different performance characteristics and handle different processing loads. For example, weaker computer systems, such as thin client computers and notebook computers, may only support light processing loads specified bypolicies policies policy engine 150 may select the most suitable operational policy for applications 110 running on computer(s) 105. - In one example embodiment,
policy engine 150 is configured to automatically select the most stringent operational policy for the system class with whichcomputer 105 is associated in order to maximize the number of tasks performed by the application(s) 110. In case of antivirus application, the most stringent operation policy provides the most thorough antivirus scan of theentire computer 105, which results in the highest level of system protection against viruses. In another example embodiment,policy engine 150 may utilize fuzzy logic to select the most appropriate operational policy for application(s) 110. In particular, fuzzy logic rules may be used to assess the tasks performed by the application and their effect on system performance, and to select appropriate program settings that would not overload computer(s) 105. - Again with reference to
FIG. 3 , once the appropriate policy has been selected for application 110 running oncomputer 105,policy engine 150 instructssoftware agent 120, atstep 320, to apply the selected policy to the application 110 and begin to monitor system resource utilization by application 110 to assure that resource utilization is within limits specified by the selected policy. If atstep 330,software agent 120 determines that system resource utilization does not exceed the limit specified in the selected policy, atstep 340, it continues to execute the existing policy. However, if system resource utilization begins to exceed the specified limits,software agent 120 may instructpolicy engine 150 to select another predefined policy atstep 350. Thus, ifpolicy 3 was originally selected,policy engine 150 may providepolicy 2, which has less intensive system utilization requirements and in which some functions of the software may be deactivated or performed during different time, so as to decrease load oncomputer system 105. In case of the antivirus application, a new policy may limit antivirus scan to certain sectors of hard disk drive, therefore limiting load on that system component. In addition, the new policy may specify that certain antivirus scans must be performed during off hours, such as at night, when this scan does not interfere with activities of system users during the day. - Having selected a new policy for application 110,
software agent 120 continues to monitor system resource utilization by the application, and, if it determines that system resource utilization does not exceed the new limit specified in the selected policy, it continues to execute the new policy. However, if system resource utilization begins to exceed the specified limits again,software agent 120 may instructpolicy engine 150 to select another predefined policy. If atstep 360, it is determined that no more predefined policies are available for the computer class within whichcomputer 105 was assigned,software agent 120 may collect all available system configuration and resource utilization information aboutcomputer 105 and forward it topolicy engine 150.Policy engine 105 in turn uses the collected information to create a custom policy for application 110, such as an antivirus program. In one example embodiment,policy engine 150 may contactremote server 170 to request administrator's assistance in generation of custom operational policies for application 110, which will improve system performance. -
FIG. 6 depicts anexemplary computer system 5, which can be used to implementcomputer 105, in accordance with one example embodiment. It should be noted thatcomputer system 5 may also be used to implement a desktop computer, a workstation, a laptop computer, an application server or other type of data processing device. As depicted,computer system 5 includesCPU 15,system memory 20, hard disk drive(s) 30, optical drive(s) 35, serial port(s) 40,graphics card 45,audio card 50 and network card(s) 55 connected by system bus 10. System bus 10 may be any of several types of bus structures including a memory bus or memory controller, a peripheral bus and a local bus using any of a variety of known bus architectures.CPU 15 may includeIntel® Core 2 Quad 2.33 GHz processor or other type of microprocessor. -
System memory 20 includes a read-only memory (ROM) 21 and random access memory (RAM) 23.Memory 20 may be implemented as in DRAM (dynamic RAM), EPROM, EEPROM, Flash or other type of memory architecture.ROM 21 stores a basic input/output system 22 (BIOS), containing the basic routines that help to transfer information between the components ofcomputer system 5, such as during start-up.RAM 23 stores operating system 24 (OS), such as Windows® Vista® or other type of OS, that is responsible for management and coordination of processes and allocation and sharing of hardware resources incomputer system 5.System memory 20 also stores applications andprograms 25 that are currently running on thecomputer 5, including an antivirus application and various other programs.System memory 20 also storesvarious runtime data 26 used by the applications and programs 25. -
Computer system 5 may further include hard disk drive(s) 30, such as 500 GB SATA magnetic hard drive, and optical disk drive(s) 35 for reading from or writing to a removable optical disk, such as a CD-ROM, DVD-ROM or other optical media.Drives exemplary computer system 5 employs magnetic and optical disks, it should be appreciated by those skilled in the art that other types of computer readable media that can store data accessible by acomputer 5, such as magnetic cassettes, flash memory cards, digital video disks, RAMs, ROMs, EPROMs and other types of memory may also be used in alternative embodiments of the computer system. -
Computer system 5 further includes a plurality ofserial ports 40, such as Universal Serial Bus (USB), for connecting data input device(s) 75, such as keyboard, mouse, touch pad and other.Serial ports 40 may be also be used to connect data output device(s) 80, such as printer, scanner and other, as well as other peripheral device(s) 85, such as external data storage devices and the like.Computer system 5 may also includegraphics card 45, such as nVidia® GeForce® GT 240M or other video card, for interfacing with amonitor 60 or other video reproduction device.Computer system 5 may also include anaudio card 50 for reproducing sound via internal orexternal speakers 65. In addition,computer system 5 may include network card(s) 55, such as Ethernet, WiFi, GSM, Bluetooth or other wired, wireless, or cellular network interface for connectingcomputer system 5 to network 70, such as the Internet. - As used in this application, the terms “system,” “component,” “agent” and the like are intended to include a computer-related entity, such as but not limited to hardware, firmware, a combination of hardware and software, software, or software in execution. For example, a component may be, but is not limited to being, a process running on a processor, a processor, an object, an executable, a thread of execution, a program, and/or a computer. By way of illustration, both an application running on a computing device and the computing device can be a component. One or more components can reside within a process and/or thread of execution and a component may be localized on one computer and/or distributed between two or more computers. In addition, these components can execute from various non-transitory computer-readable medium having various data structures stored thereon. The components may communicate by way of local and/or remote processes such as in accordance with a signal having one or more data packets, such as data from one component interacting with another component in a local system and/or across a network, such as the Internet with other systems.
- In various embodiments, the algorithms and methods described herein may be implemented in hardware, software, firmware, or any combination thereof. If implemented in software, the functions may be stored or transmitted as one or more instructions or code on a non-transitory computer-readable medium. Computer-readable media includes both computer storage media and communication media including any medium that facilitates transfer of a computer program from one place to another. A storage medium may be any available media that can be accessed by a computer. By way of example, and not limitation, such computer-readable media can comprise RAM, ROM, EEPROM, CD-ROM or other optical disk storage, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and that can be accessed by a computer. Also, any connection may be termed a computer-readable medium. For example, if software is transmitted from a website, server, or other remote source using a coaxial cable, fiber optic cable, twisted pair, digital subscriber line (DSL), or wireless technologies such as infrared, radio, and microwave, then the coaxial cable, fiber optic cable, twisted pair, DSL, or wireless technologies such as infrared, radio, and microwave are included in the definition of medium. Disk and disc, as used herein, includes compact disc (CD), laser disc, optical disc, digital versatile disc (DVD), floppy disk and Blu-ray® disc where disks usually reproduce data magnetically, while discs usually reproduce data optically with lasers. Combinations of the above should also be included within the scope of computer-readable media.
- In the interest of clarity, not all of the routine features of the implementations described herein are shown and described. It will be appreciated that in the development of any such actual implementation, numerous implementation-specific decisions must be made in order to achieve the developer's specific goals, such as compliance with application-related constraints, and that these specific goals will vary from one implementation to another and from one developer to another. Moreover, it will be appreciated that such a development effort might be complex and time-consuming, but would nevertheless be a routine undertaking of engineering for those of ordinary skill in the art having the benefit of this disclosure.
- Furthermore, it is to be understood that the phraseology or terminology used herein is for the purpose of description and not of limitation, such that the terminology or phraseology of the present specification is to be interpreted by the skilled in the art in light of the teachings and guidance presented herein, in combination with the knowledge of the skilled in the relevant art(s). Moreover, it is not intended for any term in the specification or claims to be ascribed an uncommon or special meaning unless explicitly set forth as such. The various embodiments disclosed herein encompass present and future known equivalents to the known components referred to herein by way of illustration. Moreover, while embodiments and applications have been shown and described, it would be apparent to those skilled in the art having the benefit of this disclosure that many more modifications than mentioned above are possible without departing from the inventive concepts disclosed herein.
Claims (20)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US13/034,257 US8079060B1 (en) | 2010-05-18 | 2011-02-24 | Systems and methods for policy-based program configuration |
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
RU2010119565 | 2010-05-18 | ||
RU2010119565 | 2010-05-18 | ||
US12/892,678 US7917954B1 (en) | 2010-09-28 | 2010-09-28 | Systems and methods for policy-based program configuration |
US13/034,257 US8079060B1 (en) | 2010-05-18 | 2011-02-24 | Systems and methods for policy-based program configuration |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US12/892,678 Continuation US7917954B1 (en) | 2010-05-18 | 2010-09-28 | Systems and methods for policy-based program configuration |
Publications (2)
Publication Number | Publication Date |
---|---|
US20110289585A1 true US20110289585A1 (en) | 2011-11-24 |
US8079060B1 US8079060B1 (en) | 2011-12-13 |
Family
ID=43770003
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US12/892,678 Active US7917954B1 (en) | 2010-05-18 | 2010-09-28 | Systems and methods for policy-based program configuration |
US13/034,257 Active US8079060B1 (en) | 2010-05-18 | 2011-02-24 | Systems and methods for policy-based program configuration |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US12/892,678 Active US7917954B1 (en) | 2010-05-18 | 2010-09-28 | Systems and methods for policy-based program configuration |
Country Status (1)
Country | Link |
---|---|
US (2) | US7917954B1 (en) |
Cited By (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8505069B1 (en) * | 2012-08-10 | 2013-08-06 | Kaspersky Lab Zao | System and method for updating authorized software |
US8805972B1 (en) * | 2013-06-26 | 2014-08-12 | Kaspersky Lab Zao | Multi-platform operational objective configurator for computing devices |
US8839234B1 (en) | 2012-12-25 | 2014-09-16 | Kaspersky Lab Zao | System and method for automated configuration of software installation package |
WO2014158184A1 (en) * | 2013-03-29 | 2014-10-02 | Hewlett-Packard Development Company, L.P. | Performance rules and storage units |
US20150207821A1 (en) * | 2013-06-28 | 2015-07-23 | Kaspersky Lab Zao | System and method for resolving conflicts between application control rules |
US9244671B2 (en) | 2012-12-25 | 2016-01-26 | AO Kaspersky Lab | System and method for deploying preconfigured software |
US20160110183A1 (en) * | 2014-04-30 | 2016-04-21 | Pivotal Software, Inc. | Fast deployment across cloud platforms |
TWI602147B (en) * | 2013-03-22 | 2017-10-11 | 技嘉科技股份有限公司 | Computer device and efficency optimization method for graphic card thereof |
US10210020B2 (en) | 2016-06-29 | 2019-02-19 | International Business Machines Corporation | Scheduling requests in an execution environment |
Families Citing this family (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
RU2446457C1 (en) | 2010-12-30 | 2012-03-27 | Закрытое акционерное общество "Лаборатория Касперского" | System and method for remote administration of personal computers within network |
US8621634B2 (en) * | 2011-01-13 | 2013-12-31 | F-Secure Oyj | Malware detection based on a predetermined criterion |
US20130325758A1 (en) * | 2012-05-30 | 2013-12-05 | Microsoft Corporation | Tailored operating system learning experience |
US8925076B2 (en) | 2012-12-11 | 2014-12-30 | Kaspersky Lab Zao | Application-specific re-adjustment of computer security settings |
CN106487534B (en) * | 2015-08-24 | 2019-08-13 | 华为技术有限公司 | Generation method, device and the network controller of network control strategy |
US10032023B1 (en) * | 2016-03-25 | 2018-07-24 | Symantec Corporation | Systems and methods for selectively applying malware signatures |
CN111213121A (en) | 2017-10-05 | 2020-05-29 | 惠普发展公司,有限责任合伙企业 | Selecting computer configurations in accordance with application-based usage clusters |
US11126721B2 (en) * | 2018-06-28 | 2021-09-21 | Intel Corporation | Methods, systems and apparatus to detect polymorphic malware |
Citations (39)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5581482A (en) * | 1994-04-26 | 1996-12-03 | Unisys Corporation | Performance monitor for digital computer system |
US20020059274A1 (en) * | 2000-03-03 | 2002-05-16 | Hartsell Neal D. | Systems and methods for configuration of information management systems |
US20020095572A1 (en) * | 2001-01-12 | 2002-07-18 | Frank Mitchell R. | System and method for providing security profile information to a user of a computer system |
US20020116630A1 (en) * | 2001-02-20 | 2002-08-22 | Stehlin Jeffrey A. | System and method for establishing security profiles of computers |
US6442700B1 (en) * | 1999-08-10 | 2002-08-27 | Intel Corporation | Thermal control within systems having multiple CPU performance states |
US6539340B1 (en) * | 1999-12-10 | 2003-03-25 | Cisco Technology, Inc. | Methods and apparatus for measuring resource usage within a computer system |
US20030135609A1 (en) * | 2002-01-16 | 2003-07-17 | Sun Microsystems, Inc. | Method, system, and program for determining a modification of a system resource configuration |
US20040111725A1 (en) * | 2002-11-08 | 2004-06-10 | Bhaskar Srinivasan | Systems and methods for policy-based application management |
US20040123297A1 (en) * | 2002-11-12 | 2004-06-24 | Arm Litmited | Performance level setting of a data processing system |
US20040139302A1 (en) * | 2002-11-12 | 2004-07-15 | Arm Limited | Performance level selection in a data processing system |
US20040225662A1 (en) * | 2003-05-08 | 2004-11-11 | Hiroshi Nojima | Storage operation management system |
US20040243699A1 (en) * | 2003-05-29 | 2004-12-02 | Mike Koclanes | Policy based management of storage resources |
US20040268078A1 (en) * | 2003-06-24 | 2004-12-30 | Ahmed Hassan | Detection of out of memory and graceful shutdown |
US20050049884A1 (en) * | 2003-08-26 | 2005-03-03 | International Business Machines Corporation | Time based multi-tiered management of resource systems |
US20050097228A1 (en) * | 2002-11-12 | 2005-05-05 | Arm Limited | Data processing system performance counter |
US20060092861A1 (en) * | 2004-07-07 | 2006-05-04 | Christopher Corday | Self configuring network management system |
US20060248359A1 (en) * | 2000-09-27 | 2006-11-02 | Fung Henry T | Power on demand and workload management system and method |
US20060248360A1 (en) * | 2001-05-18 | 2006-11-02 | Fung Henry T | Multi-server and multi-CPU power management system and method |
US20070100987A1 (en) * | 2005-10-27 | 2007-05-03 | Aggarwal Vijay K | Method and system for virtualized health monitoring of resources |
US20070124797A1 (en) * | 2003-07-25 | 2007-05-31 | Rajiv Gupta | Policy based service management |
US20070240006A1 (en) * | 2000-09-27 | 2007-10-11 | Fung Henry T | System and method for activity or event base dynamic energy conserving server reconfiguration |
US20070283011A1 (en) * | 2006-06-02 | 2007-12-06 | Google Inc. | Synchronizing Configuration Information Among Multiple Clients |
US7373557B1 (en) * | 2003-04-04 | 2008-05-13 | Unisys Corporation | Performance monitor for data processing systems |
US20080225719A1 (en) * | 2007-03-12 | 2008-09-18 | Vamsi Korrapati | Systems and methods for using object oriented expressions to configure application security policies |
US20080229381A1 (en) * | 2007-03-12 | 2008-09-18 | Namit Sikka | Systems and methods for managing application security profiles |
US20080250276A1 (en) * | 2004-03-09 | 2008-10-09 | Alcatel-Lucent | Memory growth detection |
US20080256593A1 (en) * | 2007-04-16 | 2008-10-16 | Microsoft Corporation | Policy-Management Infrastructure |
US20090144568A1 (en) * | 2000-09-27 | 2009-06-04 | Fung Henry T | Apparatus and method for modular dynamically power managed power supply and cooling system for computer systems, server applications, and other electronic devices |
US20090164635A1 (en) * | 2007-08-07 | 2009-06-25 | Dennis Denker | Systems and methods for providing resource allocation in a networked environment |
US20090182866A1 (en) * | 2008-01-16 | 2009-07-16 | Kentaro Watanabe | Method of setting and managing performance monitoring conditions and computer system using the method |
US20090210360A1 (en) * | 2008-02-20 | 2009-08-20 | Oracle International Corporation | Computing the values of configuration parameters for optimal performance of associated applications |
US7581224B2 (en) * | 2003-07-10 | 2009-08-25 | Hewlett-Packard Development Company, L.P. | Systems and methods for monitoring resource utilization and application performance |
US20090328219A1 (en) * | 2008-06-27 | 2009-12-31 | Juniper Networks, Inc. | Dynamic policy provisioning within network security devices |
US20100107172A1 (en) * | 2003-12-31 | 2010-04-29 | Sychron Advanced Technologies, Inc. | System providing methodology for policy-based resource allocation |
US20100220622A1 (en) * | 2009-02-27 | 2010-09-02 | Yottaa Inc | Adaptive network with automatic scaling |
US20100228819A1 (en) * | 2009-03-05 | 2010-09-09 | Yottaa Inc | System and method for performance acceleration, data protection, disaster recovery and on-demand scaling of computer applications |
US20100242109A1 (en) * | 2009-03-17 | 2010-09-23 | Lee Graham J | Method and system for preemptive scanning of computer files |
US7861177B2 (en) * | 2004-04-21 | 2010-12-28 | Sap Aktiengesellschaft | Software configuration program for software applications |
US20110154443A1 (en) * | 2009-12-23 | 2011-06-23 | Ravindranath Thakur | Systems and methods for aaa-traffic management information sharing across cores in a multi-core system |
Family Cites Families (30)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPH03129442A (en) | 1989-10-16 | 1991-06-03 | Toshiba Corp | Cpu performance measuring instrument |
DE4325296A1 (en) | 1993-07-28 | 1995-02-02 | Zahnradfabrik Friedrichshafen | Control system for shifting an automatic transmission |
JPH10143400A (en) | 1996-11-07 | 1998-05-29 | Fuji Electric Co Ltd | Method for evaluating performance of computer system for control |
DE19734711C1 (en) | 1997-08-11 | 1999-04-15 | Siemens Ag | Controllers with discrete-time, dynamic fuzzy control elements |
US6459682B1 (en) * | 1998-04-07 | 2002-10-01 | International Business Machines Corporation | Architecture for supporting service level agreements in an IP network |
US20020095400A1 (en) * | 2000-03-03 | 2002-07-18 | Johnson Scott C | Systems and methods for managing differentiated service in information management environments |
US20020152305A1 (en) * | 2000-03-03 | 2002-10-17 | Jackson Gregory J. | Systems and methods for resource utilization analysis in information management environments |
US20020120741A1 (en) * | 2000-03-03 | 2002-08-29 | Webb Theodore S. | Systems and methods for using distributed interconnects in information management enviroments |
US20020049841A1 (en) * | 2000-03-03 | 2002-04-25 | Johnson Scott C | Systems and methods for providing differentiated service in information management environments |
US20020049608A1 (en) * | 2000-03-03 | 2002-04-25 | Hartsell Neal D. | Systems and methods for providing differentiated business services in information management environments |
US20020194251A1 (en) * | 2000-03-03 | 2002-12-19 | Richter Roger K. | Systems and methods for resource usage accounting in information management environments |
US6996517B1 (en) * | 2000-06-06 | 2006-02-07 | Microsoft Corporation | Performance technology infrastructure for modeling the performance of computer systems |
US7225250B1 (en) | 2000-10-30 | 2007-05-29 | Agilent Technologies, Inc. | Method and system for predictive enterprise resource management |
US20020144259A1 (en) | 2001-03-29 | 2002-10-03 | Philips Electronics North America Corp. | Method and apparatus for controlling a media player based on user activity |
US7089172B2 (en) | 2001-12-28 | 2006-08-08 | Testout Corporation | System and method for simulating a computer environment and evaluating a user's performance within a simulation |
EP1331564A1 (en) | 2002-01-24 | 2003-07-30 | Siemens Aktiengesellschaft | Fuzzy logic based intelligent load control for distributed environment |
JP2004118628A (en) | 2002-09-27 | 2004-04-15 | Toshiba Corp | Apparatus for generating performance evaluation item, method and program therefor |
US6856951B2 (en) * | 2002-11-15 | 2005-02-15 | Rajat Moona | Repartitioning performance estimation in a hardware-software system |
US7415596B2 (en) | 2003-01-24 | 2008-08-19 | Gigafin Networks, Inc. | Parser table/production rule table configuration using CAM and SRAM |
US7093231B2 (en) | 2003-05-06 | 2006-08-15 | David H. Alderson | Grammer for regular expressions |
US7409593B2 (en) * | 2003-06-30 | 2008-08-05 | At&T Delaware Intellectual Property, Inc. | Automated diagnosis for computer networks |
JP2005135130A (en) | 2003-10-30 | 2005-05-26 | Fujitsu Ltd | Load monitoring condition decision program, system and method, and load condition monitoring program |
US9189792B2 (en) | 2005-04-04 | 2015-11-17 | Mediaport Entertainment, Inc. | System and methods for monitoring devices, systems, users, and user activity at remote locations |
US7346473B2 (en) | 2005-06-30 | 2008-03-18 | Verizon Business Global Llc | Method and system for providing performance analysis using fuzzy logic |
US7646894B2 (en) * | 2006-02-14 | 2010-01-12 | Microsoft Corporation | Bayesian competitive model integrated with a generative classifier for unspecific person verification |
US8364514B2 (en) | 2006-06-27 | 2013-01-29 | Microsoft Corporation | Monitoring group activities |
US7500158B1 (en) * | 2006-07-06 | 2009-03-03 | Referentia Systems, Inc. | System and method for network device configuration |
US8028048B2 (en) | 2007-02-27 | 2011-09-27 | International Business Machines Corporation | Method and apparatus for policy-based provisioning in a virtualized service delivery environment |
US7882216B2 (en) * | 2007-06-21 | 2011-02-01 | International Business Machines Corporation | Process and methodology for generic analysis of metrics related to resource utilization and performance |
US8166552B2 (en) * | 2008-09-12 | 2012-04-24 | Hytrust, Inc. | Adaptive configuration management system |
-
2010
- 2010-09-28 US US12/892,678 patent/US7917954B1/en active Active
-
2011
- 2011-02-24 US US13/034,257 patent/US8079060B1/en active Active
Patent Citations (48)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5581482A (en) * | 1994-04-26 | 1996-12-03 | Unisys Corporation | Performance monitor for digital computer system |
US6442700B1 (en) * | 1999-08-10 | 2002-08-27 | Intel Corporation | Thermal control within systems having multiple CPU performance states |
US6539340B1 (en) * | 1999-12-10 | 2003-03-25 | Cisco Technology, Inc. | Methods and apparatus for measuring resource usage within a computer system |
US20020059274A1 (en) * | 2000-03-03 | 2002-05-16 | Hartsell Neal D. | Systems and methods for configuration of information management systems |
US20070240006A1 (en) * | 2000-09-27 | 2007-10-11 | Fung Henry T | System and method for activity or event base dynamic energy conserving server reconfiguration |
US20070245165A1 (en) * | 2000-09-27 | 2007-10-18 | Amphus, Inc. | System and method for activity or event based dynamic energy conserving server reconfiguration |
US20060248359A1 (en) * | 2000-09-27 | 2006-11-02 | Fung Henry T | Power on demand and workload management system and method |
US20090144568A1 (en) * | 2000-09-27 | 2009-06-04 | Fung Henry T | Apparatus and method for modular dynamically power managed power supply and cooling system for computer systems, server applications, and other electronic devices |
US20090235104A1 (en) * | 2000-09-27 | 2009-09-17 | Fung Henry T | System, architecture, and method for logical server and other network devices in a dynamically configurable multi-server network environment |
US20020095572A1 (en) * | 2001-01-12 | 2002-07-18 | Frank Mitchell R. | System and method for providing security profile information to a user of a computer system |
US7213146B2 (en) * | 2001-02-20 | 2007-05-01 | Hewlett-Packard Development Company, L.P. | System and method for establishing security profiles of computers |
US20020116630A1 (en) * | 2001-02-20 | 2002-08-22 | Stehlin Jeffrey A. | System and method for establishing security profiles of computers |
US20060248360A1 (en) * | 2001-05-18 | 2006-11-02 | Fung Henry T | Multi-server and multi-CPU power management system and method |
US20030135609A1 (en) * | 2002-01-16 | 2003-07-17 | Sun Microsystems, Inc. | Method, system, and program for determining a modification of a system resource configuration |
US20040111725A1 (en) * | 2002-11-08 | 2004-06-10 | Bhaskar Srinivasan | Systems and methods for policy-based application management |
US20040139302A1 (en) * | 2002-11-12 | 2004-07-15 | Arm Limited | Performance level selection in a data processing system |
US20040123297A1 (en) * | 2002-11-12 | 2004-06-24 | Arm Litmited | Performance level setting of a data processing system |
US20050097228A1 (en) * | 2002-11-12 | 2005-05-05 | Arm Limited | Data processing system performance counter |
US7131015B2 (en) * | 2002-11-12 | 2006-10-31 | Arm Limited | Performance level selection in a data processing system using a plurality of performance request calculating algorithms |
US20070011476A1 (en) * | 2002-11-12 | 2007-01-11 | Arm Limited | Performance level selection in a data processing system |
US7373557B1 (en) * | 2003-04-04 | 2008-05-13 | Unisys Corporation | Performance monitor for data processing systems |
US20040225662A1 (en) * | 2003-05-08 | 2004-11-11 | Hiroshi Nojima | Storage operation management system |
US20040243699A1 (en) * | 2003-05-29 | 2004-12-02 | Mike Koclanes | Policy based management of storage resources |
US7284099B2 (en) * | 2003-06-24 | 2007-10-16 | Research In Motion Limited | Detection of out of memory and graceful shutdown |
US20080005523A1 (en) * | 2003-06-24 | 2008-01-03 | Research In Motion Limited | Detection of out-of-memory and graceful shutdown |
US20040268078A1 (en) * | 2003-06-24 | 2004-12-30 | Ahmed Hassan | Detection of out of memory and graceful shutdown |
US7581224B2 (en) * | 2003-07-10 | 2009-08-25 | Hewlett-Packard Development Company, L.P. | Systems and methods for monitoring resource utilization and application performance |
US20070124797A1 (en) * | 2003-07-25 | 2007-05-31 | Rajiv Gupta | Policy based service management |
US7757268B2 (en) * | 2003-07-25 | 2010-07-13 | Oracle International Corporation | Policy based service management |
US20050049884A1 (en) * | 2003-08-26 | 2005-03-03 | International Business Machines Corporation | Time based multi-tiered management of resource systems |
US20100107172A1 (en) * | 2003-12-31 | 2010-04-29 | Sychron Advanced Technologies, Inc. | System providing methodology for policy-based resource allocation |
US20080250276A1 (en) * | 2004-03-09 | 2008-10-09 | Alcatel-Lucent | Memory growth detection |
US7861177B2 (en) * | 2004-04-21 | 2010-12-28 | Sap Aktiengesellschaft | Software configuration program for software applications |
US20060092861A1 (en) * | 2004-07-07 | 2006-05-04 | Christopher Corday | Self configuring network management system |
US20070100987A1 (en) * | 2005-10-27 | 2007-05-03 | Aggarwal Vijay K | Method and system for virtualized health monitoring of resources |
US20070283011A1 (en) * | 2006-06-02 | 2007-12-06 | Google Inc. | Synchronizing Configuration Information Among Multiple Clients |
US20080229381A1 (en) * | 2007-03-12 | 2008-09-18 | Namit Sikka | Systems and methods for managing application security profiles |
US20080225719A1 (en) * | 2007-03-12 | 2008-09-18 | Vamsi Korrapati | Systems and methods for using object oriented expressions to configure application security policies |
US20080256593A1 (en) * | 2007-04-16 | 2008-10-16 | Microsoft Corporation | Policy-Management Infrastructure |
US20090171821A1 (en) * | 2007-08-07 | 2009-07-02 | Dennis Denker | Systems and methods for providing resource allocation in a networked environment |
US20090164635A1 (en) * | 2007-08-07 | 2009-06-25 | Dennis Denker | Systems and methods for providing resource allocation in a networked environment |
US20090182866A1 (en) * | 2008-01-16 | 2009-07-16 | Kentaro Watanabe | Method of setting and managing performance monitoring conditions and computer system using the method |
US20090210360A1 (en) * | 2008-02-20 | 2009-08-20 | Oracle International Corporation | Computing the values of configuration parameters for optimal performance of associated applications |
US20090328219A1 (en) * | 2008-06-27 | 2009-12-31 | Juniper Networks, Inc. | Dynamic policy provisioning within network security devices |
US20100220622A1 (en) * | 2009-02-27 | 2010-09-02 | Yottaa Inc | Adaptive network with automatic scaling |
US20100228819A1 (en) * | 2009-03-05 | 2010-09-09 | Yottaa Inc | System and method for performance acceleration, data protection, disaster recovery and on-demand scaling of computer applications |
US20100242109A1 (en) * | 2009-03-17 | 2010-09-23 | Lee Graham J | Method and system for preemptive scanning of computer files |
US20110154443A1 (en) * | 2009-12-23 | 2011-06-23 | Ravindranath Thakur | Systems and methods for aaa-traffic management information sharing across cores in a multi-core system |
Cited By (12)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8505069B1 (en) * | 2012-08-10 | 2013-08-06 | Kaspersky Lab Zao | System and method for updating authorized software |
US8839234B1 (en) | 2012-12-25 | 2014-09-16 | Kaspersky Lab Zao | System and method for automated configuration of software installation package |
US9244671B2 (en) | 2012-12-25 | 2016-01-26 | AO Kaspersky Lab | System and method for deploying preconfigured software |
TWI602147B (en) * | 2013-03-22 | 2017-10-11 | 技嘉科技股份有限公司 | Computer device and efficency optimization method for graphic card thereof |
WO2014158184A1 (en) * | 2013-03-29 | 2014-10-02 | Hewlett-Packard Development Company, L.P. | Performance rules and storage units |
US10489065B2 (en) | 2013-03-29 | 2019-11-26 | Hewlett Packard Enterprise Development Lp | Performance rules and storage units |
US8805972B1 (en) * | 2013-06-26 | 2014-08-12 | Kaspersky Lab Zao | Multi-platform operational objective configurator for computing devices |
US20150207821A1 (en) * | 2013-06-28 | 2015-07-23 | Kaspersky Lab Zao | System and method for resolving conflicts between application control rules |
US9432406B2 (en) * | 2013-06-28 | 2016-08-30 | AO Kaspersky Lab | System and method for resolving conflicts between application control rules |
US20160110183A1 (en) * | 2014-04-30 | 2016-04-21 | Pivotal Software, Inc. | Fast deployment across cloud platforms |
US9959108B2 (en) * | 2014-04-30 | 2018-05-01 | Pivotal Software, Inc. | Fast deployment across cloud platforms |
US10210020B2 (en) | 2016-06-29 | 2019-02-19 | International Business Machines Corporation | Scheduling requests in an execution environment |
Also Published As
Publication number | Publication date |
---|---|
US8079060B1 (en) | 2011-12-13 |
US7917954B1 (en) | 2011-03-29 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US8079060B1 (en) | Systems and methods for policy-based program configuration | |
EP2388695B1 (en) | Adaptive configuration of conflicting applications | |
US10599846B2 (en) | Segregating executable files exhibiting network activity | |
US11245702B2 (en) | Security vulnerability assessment for users of a cloud computing environment | |
US10003547B2 (en) | Monitoring computer process resource usage | |
US8161475B2 (en) | Automatic load and balancing for virtual machines to meet resource requirements | |
US9898602B2 (en) | System, apparatus, and method for adaptive observation of mobile device behavior | |
JP5632097B2 (en) | Malware detection based on system behavior independent of signature | |
US8171545B1 (en) | Process profiling for behavioral anomaly detection | |
US20210255769A1 (en) | Systems and methods for modifying storage system configuration using artificial intelligence | |
US8978142B2 (en) | System and method for detection of malware using behavior model scripts of security rating rules | |
JP6777732B2 (en) | Detecting software attacks on processes in computing devices | |
KR20180008517A (en) | Continuous Classifiers for Computer Security Applications | |
US10216934B2 (en) | Inferential exploit attempt detection | |
EP2388700A2 (en) | Systems and methods for policy-based program configuration | |
US11770387B1 (en) | Graph-based detection of lateral movement in computer networks | |
US8490195B1 (en) | Method and apparatus for behavioral detection of malware in a computer system | |
Wang et al. | CrowdNet: identifying large-scale malicious attacks over android kernel structures | |
US11775272B1 (en) | Deployment of software programs based on security levels thereof |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: KASPERSKY LAB ZAO, RUSSIAN FEDERATION Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:ZAITSEV, OLEG V.;REEL/FRAME:027241/0513 Effective date: 20100728 |
|
STCF | Information on status: patent grant |
Free format text: PATENTED CASE |
|
FPAY | Fee payment |
Year of fee payment: 4 |
|
MAFP | Maintenance fee payment |
Free format text: PAYMENT OF MAINTENANCE FEE, 8TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1552); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY Year of fee payment: 8 |
|
MAFP | Maintenance fee payment |
Free format text: PAYMENT OF MAINTENANCE FEE, 12TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1553); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY Year of fee payment: 12 |