Application monitoring using workload metadata
AssigneeMesosphere, Inc.
InventorAaron Justin Bell
Life of this patent
Estimating the term…
Abstract
A system for application monitoring includes an interface to receive an indication regarding an application. The system includes a processor to determine whether the application is compliant based at least in part on a set of policy rules, and in the event that the application is compliant, provide an indication that the application is compliant.
Claims18
A system for application monitoring, comprising:
- an interface configured to receive an application indication regarding an application, wherein the application indication comprises a check indication to check policy compliance for the application;
- a processor configured to:
- receive a set of policy rules from a policy storage system;
- receive metadata associated with the application from a metadata storage system, wherein the metadata associated with the application comprises personally identifiable information status of the application, wherein the personally identifiable information status of the application comprises whether the application processes or stores personally identifiable information and locations of personally identifiable information storage;
- determine whether the application is compliant based at least in part on the set of policy rules, wherein determining whether the application is compliant comprises selecting a policy rule from the set of policy rules, performing a set of logical tests on the metadata, and comparing the policy rule with the personally identifiable information status of the application to determine whether the metadata complies with the policy rule, wherein the personally identifiable information status of the application is necessary to determine whether the metadata complies with the policy rule;
- and
- in response to a compliant determination that the application is compliant:
- provide a compliance indication that the application is compliant, wherein the compliance indication that the application is compliant causes the application to be allowed to run;
- and
- in response to a noncompliant determination that the application is not compliant:
- provide a noncompliance indication that the application is not compliant, wherein the noncompliance indication that the application is not compliant causes the application not to be allowed to run.
A method for application monitoring, comprising:
- receiving an application indication regarding an application, wherein the indication comprises a check indication to check policy compliance for the application;
- receiving a set of policy rules from a policy storage system;
- receiving metadata associated with the application from a metadata storage system, wherein the metadata associated with the application comprises personally identifiable information status of the application, wherein the personally identifiable information status of the application comprises whether the application processes or stores personally identifiable information and locations of personally identifiable information storage;
- determining, using a processor, whether the application is compliant based at least in part on the set of policy rules, wherein determining whether the application is compliant comprises selecting a policy rule from the set of policy rules, performing a set of logical tests on the metadata, and comparing the policy rule with the personally identifiable information status of the application to determine whether the metadata complies with the policy rule, wherein the personally identifiable information status of the application is necessary to determine whether the metadata complies with the policy rule;
- and
- in response to a compliant determination that the application is compliant:
- providing a compliance indication that the application is compliant, wherein the compliance indication that the application is compliant causes the application to be allowed to run;
- and
- in response to a noncompliant determination that the application is not compliant:
- providing a noncompliance indication that the application is not compliant, wherein the noncompliance indication that the application is not compliant causes the application not to be allowed to run.
A computer program product for application monitoring, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
- receiving an application indication regarding an application, wherein the application indication comprises a check to check policy compliance for the application;
- receiving a set of policy rules from a policy storage system;
- receiving metadata associated with the application from a metadata storage system, wherein the metadata associated with the application comprises personally identifiable information status of the application, wherein the personally identifiable information status of the application comprises whether the application processes or stores personally identifiable information and locations of personally identifiable information storage;
- determining whether the application is compliant based at least in part on the set of policy rules, wherein determining whether the application is compliant comprises selecting a policy rule from the set of policy rules, performing a set of logical tests on the metadata, and comparing the policy rule with the personally identifiable information status of the application to determine whether the metadata complies with the policy rule, wherein the personally identifiable information status of the application is necessary to determine whether the metadata complies with the policy rule;
- and
- in response to a compliant determination that the application is compliant:
- providing a compliance indication that the application is compliant, wherein the compliance indication that the application is compliant causes the application to be allowed to run;
- and
- in response to a noncompliant determination that the application is not compliant:
- providing a noncompliance indication that the application is not compliant, wherein the noncompliance indication that the application is not compliant causes the application not to be allowed to run.
Dependencies are inferred from the claim text.