Software assurance for heterogeneous distributed computing systems

A system comprising:

• a data storage system;
• and
• processing circuitry configured to:
• generate, in the data storage system, data representing a risk model for a distributed computing system, wherein:
• the risk model comprises a plurality of tree nodes organized as a tree,
• for each respective tree node of the risk model, the respective tree node corresponds to a respective event that may befall the distributed computing system,
• for each respective non-leaf tree node of the risk model, the events corresponding to child tree nodes of the respective non-leaf tree node are preconditions of the event corresponding to the respective non-leaf tree node, and
• the tree nodes of the risk model include a first inspected tree node and a second inspected tree node,
• generate, in the data storage system, data associating a first test agent with a first target, the first test agent configured to perform a data gathering routine that gathers data from the first target associated with the first test agent, the first target associated with the first test agent comprising a first set of one or more system nodes in the distributed computing system;
• generate, in the data storage system, data associating the first inspected tree node of the risk model with the first test agent, the data gathered by the data gathering routine of the first test agent comprising data indicating whether the event corresponding to the first inspected tree node is occurring or has occurred;
• generate, in the data storage system, data associating a second test agent with a second target, the second test agent being different from the first test agent, the second test agent configured to perform a data gathering routine that gathers data from the second target associated with the second test agent, the second target associated with the second test agent comprising a second set of one or more system nodes in the distributed computing system;
• generate, in the data storage system, data associating the second inspected tree node of the risk model with the second test agent, the data gathered by the data gathering routine of the second test agent comprising data indicating whether the event corresponding to the inspected tree node is occurring or has occurred;
• perform, according to a predefined schedule that specifies a recurrence pattern of the data gathering routine of the first test agent, the data gathering routine of the first test agent;
• perform, according to a second predefined schedule that specifies a recurrence pattern of the data gathering routine of the second test agent, the data gathering routine of the second test agent;
• output a graphical representation of the data indicating whether the event corresponding to the inspected tree node is occurring or has occurred;
• and
• output a graphical representation of the data indicating whether the event corresponding to the second inspected tree node is occurring or has occurred.

A non-transitory computer-readable storage medium having instructions stored thereon that, when executed, configure an analysis computing system to:

• generate data representing a risk model for a distributed computing system, wherein:
• the risk model comprises a plurality of tree nodes organized as a tree,
• for each respective tree node of the risk model, the respective tree node corresponds to a respective event that may befall the distributed computing system,
• for each respective non-leaf tree node of the risk model, the events corresponding to child tree nodes of the respective non-leaf tree node are preconditions of the event corresponding to the respective non-leaf tree node,
• the tree nodes of the risk model include a first inspected tree node and a second inspected tree node,
• generate data associating a first test agent with a first target, the first test agent configured to perform a data gathering routine that gathers data from the first target associated with the first test agent, the first target associated with the first test agent comprising a first set of one or more system nodes in the distributed computing system;
• generate data associating the first inspected tree node of the risk model with the first test agent, the data gathered by the data gathering routine of the first test agent comprising data indicating whether the event corresponding to the first inspected tree node is occurring or has occurred;
• generate data associating a second test agent with a second target, the second test agent being different from the first test agent, the second test agent configured to perform a data gathering routine that gathers data from the second target associated with the second test agent, the second target associated with the second test agent comprising a second set of one or more system nodes in the distributed computing system;
• generate data associating the second inspected tree node of the risk model with the second test agent, the data gathered by the data gathering routine of the second test agent comprising data indicating whether the event corresponding to the inspected tree node is occurring or has occurred;
• perform, according to a first predefined schedule that specifies a recurrence pattern of the data gathering routine of the first test agent, the data gathering routine of the first test agent;
• perform according to a second predefined schedule that specifies a recurrence pattern of the data gathering routine of the second test agent, the data gathering routine of the second test agent;
• output a graphical representation of the data indicating whether the event corresponding to the first inspected tree node is occurring or has occurred;
• and
• output, by the processing circuitry, a graphical representation of the data indicating whether the event corresponding to the second inspected tree node is occurring or has occurred.