Dynamic re-composition of patch groups using stream clustering

A computer program product that facilitates server group patching, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to:

• identify a subset of server devices that share at least one common vulnerability from a plurality of server devices on a network;
• add the subset of server devices to a server group;
• in response to a first risk associated with a first server device of the server group, patch the server devices of the server group to mitigate the first risk to the server group, wherein the server group is comprised of at least the first server device and a second server device;
• and
• monitor data associated with a second risk to the server group to mitigate the second risk to the server group.

A computer-implemented method, comprising:

• identifying, by a device operatively coupled to a processor, a subset of server devices that share at least one common vulnerability from a plurality of server devices on a network;
• adding, by the device, the subset of server devices to a server group;
• in response to a first risk associated with a first server device of the server group, patching, by the device, the server devices of the server group to mitigate the first risk to the server group, wherein the server group is comprised of at least the first server device and a second server device;
• and
• monitoring, by the device, data associated with a second risk to the server group to mitigate the second risk to the server group.

A system, comprising:

• a memory that stores computer executable components;
• and
• a processor that executes the computer executable components stored in the memory, wherein the computer executable components comprise:
• an adjustment component that:
• identifies a subset of server devices that share at least one common vulnerability from a plurality of server devices on a network;
• and
• adds the subset of server devices to a server group;
• a risk assessment component that:
• in response to a first risk associated with a first server device of the server group, patches the server devices of the server group to mitigate the first risk to the server group, wherein the server group is comprised of at least the first server device and a second server device;
• a monitoring component that:
• monitors data associated with a second risk to the server group to mitigate the second risk to the server group;
• and
• a learning component that:
• analyzes risk data associated with a previous risk received from a workstation device, resulting in a risk prediction.

A computer program product that facilitates server group patching, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to:

• identify a subset of server devices that share at least one common vulnerability from a plurality of server devices on a network;
• add the subset of server devices to a server group;
• in response to a first risk associated with a first server device of the server group, patch the server devices of the server group to mitigate the first risk to the server group, wherein the server group is comprised of at least the first server device and a second server device;
• monitor data associated with a second risk to the server group to mitigate the second risk to the server group;
• and
• analyze risk data associated with a previous risk received from a workstation device, resulting in a risk prediction.