System and method for analyzing and prioritizing changes and differences to configuration parameters in information technology systems

摘要

A method for analyzing and prioritizing changes to configuration parameters of applications in an information technology system, including collecting configuration parameters of applications executed on computer stations in a network, storing the collected configuration parameters in a database, comparing the configuration parameters of an application from a specific station with configuration parameters of the application at different stations, determining differences in the configuration parameters by the comparing, analyzing the determined differences according to a set of analysis dimensions that represent rules for evaluating the differences, assigning a score representing the level of conformity of the differences to each of the analysis dimensions, defining a context for reviewing the differences, assigning a weight to each analysis dimension representing the importance of the analysis dimension, adjusting the weights assigned to the analysis dimension based on the context, calculating a total risk for each analysis dimension for displaying to a user.

主权项

1. A method for analyzing and prioritizing changes to configuration parameters of applications in an information technology system, comprising:
collecting configuration parameters of applications executed on computer stations connected in a network implementing the information technology system; storing the collected configuration parameters in a database; comparing the configuration parameters of an application from a specific station with configuration parameters of the application at different stations; determining differences in the configuration parameters by said comparing; analyzing the determined differences according to a set of analysis dimensions that represent rules for evaluating the differences; assigning a score representing the level of conformity of the differences to each of the analysis dimensions; defining a context for reviewing the differences; assigning a weight to each analysis dimension representing the importance of the analysis dimension; adjusting the weights assigned to the analysis dimension based on the context; calculating a total risk for each analysis dimension by multiplying the analysis dimension scores for each difference with the weights and summating for each analysis dimension over all differences; displaying the calculated total risk.