Automated generation of an information technology asset ontology
A method includes obtaining information regarding a plurality of information technology assets in use across an enterprise system, identifying dependencies between the information technology assets in use across the enterprise system, and generating an information technology asset ontology comprising a knowledge graph with nodes representing the information technology assets and edges between the nodes representing dependencies between the information technology assets. The method also includes monitoring the information technology assets of the enterprise system to detect one or more events and, responsive to detecting a given one of the one or more events, utilizing the information technology asset ontology to identify one or more of the information technology assets of the enterprise system affected by the given event. The method further comprises applying one or more remedial measures to at least a given one of the identified information technology assets of the enterprise system affected by the given event.
1. A method comprising steps of:
obtaining information regarding a plurality of information technology assets in use across an enterprise system;
identifying dependencies between the plurality of information technology assets in use across the enterprise system;
generating an information technology asset ontology comprising a knowledge graph with nodes representing the plurality of information technology assets and edges between the nodes representing dependencies between the plurality of information technology assets;
monitoring the plurality of information technology assets of the enterprise system to detect one or more events;
responsive to detecting a given one of the one or more events, utilizing the information technology asset ontology to identify one or more of the plurality of information technology assets of the enterprise system affected by the given event; and
applying one or more remedial measures to at least a given one of the identified information technology assets of the enterprise system affected by the given event;
wherein the method is performed by at least one processing device comprising a processor coupled to a memory.
2. The method of claim 1 wherein the enterprise system comprises one or more physical and virtual computing resources, and wherein one or more of the plurality of information technology assets comprise at least one of:
one or more operating systems running on the physical and virtual computing resources; and
one or more applications running on the physical and virtual computing resources.
3. The method of claim 1 wherein the enterprise system comprises one or more physical and virtual computing resources, and wherein one or more of the plurality of information technology assets comprise at least one of:
one or more coding languages utilized by software running on the physical and virtual computing resources;
one or more coding frameworks utilized by software running on the physical and virtual computing resources;
one or more software libraries utilized by software running on the physical and virtual computing resources; and
one or more software components utilized by software running on the physical and virtual computing resources.
4. The method of claim 1 wherein obtaining the information regarding the plurality of information technology assets in use across the enterprise system comprises:
identifying the plurality of information technology assets; and
mapping respective ones of the plurality of information technology assets to information technology products in an information technology product taxonomy.
5. The method of claim 4 wherein obtaining the information regarding the plurality of information technology assets in use across the enterprise system further comprises associating respective ones of the plurality of information technology assets with metadata collected from one or more tools that monitor the information technology assets of the enterprise system.
6. The method of claim 1 wherein identifying the dependencies between the plurality of information technology assets in the enterprise system comprises extracting dependencies from security information and event management logs and application performance management logs.
7. The method of claim 1 wherein monitoring the plurality of information technology assets of the enterprise system comprises providing one or more interfaces for accessing the information technology asset ontology, and wherein detecting the given event comprises utilizing at least one of the one or more interfaces.
8. The method of claim 7 wherein the one or more interfaces comprise a graphical user interface providing user interface features for selecting at least one of one or more nodes and one or more edges of the knowledge graph of the information technology asset ontology for exploratory analytics.
9. The method of claim 7 wherein the one or more interfaces comprise a data access interface and a visualization interface, the visualization interface providing a view of a selected portion of the information technology asset ontology in response to one or more queries submitted via the data access interface.
10. The method of claim 9 wherein the one or more queries comprise at least one of:
determining information technology investments of the enterprise system in one or more designated types of information technology assets;
determining an amount of information technology investment by the enterprise system in the one or more designated types of information technology assets; and
determining a cost of maintaining the one or more designated types of information technology assets in the enterprise system.
11. The method of claim 9 wherein the one or more queries comprise at least one of:
determining whether one or more designated types of information technology assets are in use by the enterprise system;
determining where the one or more designated types of information technology assets are in use by the enterprise system; and
determining how the one or more designated types of information technology assets are being used in the enterprise system.
12. The method of claim 9 wherein the one or more queries comprise performing a strengths, weaknesses, opportunities and threats analysis on at least one of:
one or more designated types of information technology assets of the enterprise system; and
one or more particular instances of the one or more designated types of information technology assets of the enterprise system.
13. The method of claim 9 wherein the one or more queries comprise determining an impact of changing a given instance of an information technology asset of a first type to an information technology asset of a second type.
14. The method of claim 1 wherein applying the one or more remedial measures to the given identified information technology asset comprises at least one of:
applying one or more security hardening measures to the given identified information technology asset; and
modifying a configuration of the given identified information technology asset.
15. A computer program product comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device to perform steps of:
obtaining information regarding a plurality of information technology assets in use across an enterprise system;
identifying dependencies between the plurality of information technology assets in use across the enterprise system;
generating an information technology asset ontology comprising a knowledge graph with nodes representing the plurality of information technology assets and edges between the nodes representing dependencies between the plurality of information technology assets;
monitoring the plurality of information technology assets of the enterprise system to detect one or more events;
responsive to detecting a given one of the one or more events, utilizing the information technology asset ontology to identify one or more of the plurality of information technology assets of the enterprise system affected by the given event; and
applying one or more remedial measures to at least a given one of the identified information technology assets of the enterprise system affected by the given event.
16. The computer program product of claim 15 wherein monitoring the plurality of information technology assets of the enterprise system comprises providing one or more interfaces for accessing the information technology asset ontology, and wherein detecting the given event comprises utilizing at least one of the one or more interfaces.
17. The computer program product of claim 16 wherein the one or more interfaces comprise a data access interface and a visualization interface, the visualization interface providing a view of a selected portion of the information technology asset ontology in response to one or more queries submitted via the data access interface.
18. An apparatus comprising:
at least one processing device comprising a processor coupled to a memory;
the at least one processing device being configured to perform steps of:
obtaining information regarding a plurality of information technology assets in use across an enterprise system;
identifying dependencies between the plurality of information technology assets in use across the enterprise system;
generating an information technology asset ontology comprising a knowledge graph with nodes representing the plurality of information technology assets and edges between the nodes representing dependencies between the plurality of information technology assets;
monitoring the plurality of information technology assets of the enterprise system to detect one or more events;
responsive to detecting a given one of the one or more events, utilizing the information technology asset ontology to identify one or more of the plurality of information technology assets of the enterprise system affected by the given event; and
applying one or more remedial measures to at least a given one of the identified information technology assets of the enterprise system affected by the given event.
19. The apparatus of claim 18 wherein monitoring the plurality of information technology assets of the enterprise system comprises providing one or more interfaces for accessing the information technology asset ontology, and wherein detecting the given event comprises utilizing at least one of the one or more interfaces.
20. The apparatus of claim 19 wherein the one or more interfaces comprise a data access interface and a visualization interface, the visualization interface providing a view of a selected portion of the information technology asset ontology in response to one or more queries submitted via the data access interface.