# US 10,310,932 B2 · Using a concentration risk of a computing resource to define affinity and anti-affinity workloads > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,310,932 B2 - Document ID: US10310932B2 - Status: Granted - Kind: B2 - Application number: 15/405,888 - Filed: 2017-01-13 - Published: 2018-07-19 - Granted: 2019-06-04 - Earliest claimed: 2017-01-13 - Assignees: Bank of America Corporation - Applicants: Bank of America Corporation - Inventors: Jisoo Lee; Todd M. Goodyear - Web page: https://patentgrep.com/patent/US10310932B2 ## CPC - G06F 11/079: {Root cause analysis, i.e. error or fault diagnosis (in a hardware test environment G06F11/22; in a software test environment G06F11/36)} - G06F 11/0709: {in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems} - G06F 11/3006: {where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems (multiprogramming arrangements G06F9/46; allocation of resources G06F9/50)} - G06F 11/3051: {Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs (verification or detection of system hardware configuration G06F11/2247)} - G06F 11/3442: {for planning or managing the needed capacity} - G06F 21/50: Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems - G06F 11/0754: {by exceeding limits} - G06F 11/0793: {Remedial or corrective actions (recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40)} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract In certain embodiments, a system comprises processing circuitry and memory comprising logic. The processing circuitry is operable to execute the logic whereby the system is operable to monitor a pool of shared computing resources, determine a concentration risk associated with a first computing resource in the pool, and perform an action if the concentration risk exceeds a threshold. Each computing resource within the pool of shared computing resources is capable of being allocated dynamically in order to support one or more applications. The concentration risk is based on an extent to which the one or more applications have upstream or downstream dependencies on the first computing resource. The action comprises communicating a notification to a system operator and/or initiating a remediation step configured to reduce the concentration risk associated with the first computing resource. ## Claims ### Claim 1 A system comprising: processing circuitry and memory comprising logic, the processing circuitry operable to execute the logic whereby the system is operable to: monitor a pool of shared computing resources, wherein each computing resource within the pool of shared computing resources is capable of being allocated dynamically in order to support one or more applications; determine a concentration risk associated with a first computing resource of the pool of shared computing resources, the concentration risk based on an extent to which the one or more applications have upstream or downstream dependencies on the first computing resource, the concentration risk comprises a first level risk weighted by a first weighting factor plus a second level risk weighted by a second weighting factor, the first level risk based on the extent to which the one or more applications have the upstream or downstream dependencies on the first computing resource and the second level risk based on the extent to which the one or more applications have upstream or downstream dependencies on a second computing resource of the pool of shared computing resources; and perform an action in response to determining that the concentration risk exceeds a threshold, wherein the action comprises communicating a notification to a system operator and/or initiating a remediation step configured to reduce the concentration risk associated with the first computing resource. ### Claim 2 (depends on 1) The system of claim 1, wherein the concentration risk is determined at least in part based on a real-time utilization of the first computing resource. ### Claim 3 (depends on 1) The system of claim 1, wherein the concentration risk is determined at least in part based on a security risk associated with the first computing resource. ### Claim 4 (depends on 1) The system of claim 1, wherein the concentration risk is determined at least in part based on a priority associated with the one or more applications that have the upstream or downstream dependencies on the first computing resource. ### Claim 5 (depends on 1) The system of claim 1, wherein the concentration risk is determined at least in part based on detecting performance degradation associated with the one or more applications that have the upstream or downstream dependencies on the first computing resource. ### Claim 6 (depends on 1) The system of claim 1, wherein the first computing resource comprises a cloud-based resource maintained by a cloud provider and the concentration risk is weighted based on a geographical location of the first computing resource and/or historical performance of the cloud provider. ### Claim 7 (depends on 1) The system of claim 1, wherein the concentration risk is determined at least in part based on a frequency and/or duration of congestion experienced by the first computing resource. ### Claim 8 (depends on 1) The system of claim 1, wherein the upstream or downstream dependencies are determined at a physical layer. ### Claim 9 (depends on 1) The system of claim 1, wherein the upstream or downstream dependencies are determined at a logical layer. ### Claim 10 A method, comprising: monitoring a pool of shared computing resources, wherein each computing resource within the pool of shared computing resources is capable of being allocated dynamically in order to support one or more applications; determining a concentration risk associated with a first computing resource of the pool of shared computing resources, the concentration risk based on an extent to which the one or more applications have upstream or downstream dependencies on the first computing resource, the concentration risk comprises a first level risk weighted by a first weighting factor plus a second level risk weighted by a second weighting factor, the first level risk based on the extent to which the one or more applications have the upstream or downstream dependencies on the first computing resource and the second level risk based on the extent to which the one or more applications have upstream or downstream dependencies on a second computing resource of the pool of shared computing resources; and performing an action in response to determining that the concentration risk exceeds a threshold, wherein the action comprises communicating a notification to a system operator and/or initiating a remediation step configured to reduce the concentration risk associated with the first computing resource. ### Claim 11 (depends on 10) The method of claim 10, wherein the concentration risk is determined at least in part based on a real-time utilization of the first computing resource. ### Claim 12 (depends on 10) The method of claim 10, wherein the concentration risk is determined at least in part based on a security risk associated with the first computing resource. ### Claim 13 (depends on 10) The method of claim 10, wherein the concentration risk is determined at least in part based on a priority associated with the one or more applications that have the upstream or downstream dependencies on the first computing resource. ### Claim 14 (depends on 10) The method of claim 10, wherein the concentration risk is determined at least in part based on detecting performance degradation associated with the one or more applications that have the upstream or downstream dependencies on the first computing resource. ### Claim 15 (depends on 10) The method of claim 10, wherein the first computing resource comprises a cloud-based resource maintained by a cloud provider and the concentration risk is weighted based on a geographical location of the first computing resource and/or historical performance of the cloud provider. ### Claim 16 (depends on 10) The method of claim 10, wherein the concentration risk is determined at least in part based on a frequency and/or duration of congestion experienced by the first computing resource. ### Claim 17 (depends on 10) The method of claim 10, wherein the upstream or downstream dependencies are determined at a physical layer. ### Claim 18 (depends on 10) The method of claim 10, wherein the upstream or downstream dependencies are determined at a logical layer. ### Claim 19 A non-transitory medium comprising logic that, when executed by processing circuitry, is operable to: monitor a pool of shared computing resources, wherein each computing resource within the pool of shared computing resources is capable of being allocated dynamically in order to support one or more applications; determine a concentration risk associated with a first computing resource of the pool of shared computing resources, the concentration risk based on an extent to which the one or more applications have upstream or downstream dependencies on the first computing resource, the concentration risk comprises a first level risk weighted by a first weighting factor plus a second level risk weighted by a second weighting factor, the first level risk based on the extent to which the one or more applications have the upstream or downstream dependencies on the first computing resource and the second level risk based on the extent to which the one or more applications have upstream or downstream dependencies on a second computing resource of the pool of shared computing resources; and perform an action in response to determining that the concentration risk exceeds a threshold, wherein the action comprises communicating a notification to a system operator and/or initiating a remediation step configured to reduce the concentration risk associated with the first computing resource.