SYSTEM AND METHOD FOR CONFIGURATION POLICY EXTRACTION
A method for configuration policy extraction for an organization having a plurality of composite configuration items may include calculating distances in a configuration space between the composite configuration items. The method may also include clustering the composite configuration items into one or more dusters based on the calculated distances. The method may further include identifying configuration patterns in one or more of the clusters, and extracting at least one configuration policy based on the identified configuration patterns. A non-transitory computer readable medium and a system for configuration policy extraction for an organization having a plurality of composite configuration items are also disclosed.
1 . A method for configuration policy extraction for an organization having a plurality of composite configuration items, the method comprising:
calculating distances in a configuration space between the composite configuration items:
clustering the composite configuration items into one or more clusters based on the calculated distances;
identifying configuration patterns in one or more of said one or more clusters; and
extracting at least one configuration policy based on the identified configuration patterns.
2 . The method of claim 1 , further comprising collecting configuration data on the composite configuration items of the organization.
3 . The method of claim 1 , wherein calculating the distances between the composite configuration items comprises determining similarity between trees, using a tree edit distance algorithm.
4 . The method of claim 3 , wherein calculating the distances between the composite configuration items is done by recursively solving a minimal flow problem.
5 . The method of claim 4 , wherein the minimal flow problem is used for matching between nodes of composite configuration items of the plurality of composite configuration items.
6 . The method of claim 5 , further comprising assigning weights to attributes of the composite configuration items.
7 . The method of claim 5 , further comprising assigning a repetition penalty, the penalty depending on attributes of the composite configuration items.
8 . A non-transitory computer readable medium having stored thereron instructions for configuration policy extraction, which when executed by a processor cause the processor to perform the method of:
calculating distances in a configuration space between the composite configuration items:
clustering the composite configuration items into one or more clusters based on the calculated distances;
identifying configuration patterns in one or more of said one or more clusters; and extracting at least one configuration policy based on the identified configuration patterns.
9 . The non-transitory computer readable medium of claim 8 , including instructions to cause further the processor to perform the method collecting configuration data on the composite configuration items of the organization.
10 . The non-transitory computer readable medium of claim 8 , wherein calculating the distances between the composite configuration items comprises determining, similarity between trees, using a tree edit distance algorithm.
11 . The non-transitory computer readable medium of claim 10 , wherein calculating the, distances between the composite configuration items is done by recursively solving a minimal flow problem.
12 . The non-transitory computer readable medium of claim 11 , wherein the minimal flow problem is used for matching between nodes of composite configuration items of the plurality of composite configuration items.
13 . The non-transitory computer readable medium of claim 12 , including instructions to cause the processor to perform the method of assigning weights to attributes of the composite configuration items.
14 . The non-transitory computer readable medium of claim 12 , including instructions to cause the processor to perform the method of assigning a repetition penalty, the penalty depending on attributes of the composite configuration items.
15 . A system for configuration policy extraction for configuration policy extraction for an organization having a plurality of composite configuration items, the system comprising a processor configured to:
calculate distances in a configuration space between the composite configuration items;
cluster the composite configuration items into one or more clusters based on the calculated distances:
identify configuration patterns in one or more of said one or more clusters; and
extract at least one configuration policy based on the identified configuration patterns.
16 . The system of claim 15 , comprising a storage device for storing configuration information
17 . The system of claim 15 , comprising a crawler application for automatically searching configuration data of the organization.
18 . The system of claim 15 , further comprising an input or output device.
19 . The system of claim 15 , comprising a communication module for communicating with one or more other devices.