Identifying software responsible for changes in system stability

A computer program product including computer usable program code embodied on a tangible computer usable storage medium, the computer program product comprising:

• computer usable program code for detecting a stability change in a computer system;
• computer usable program code for identifying a first set of at least one capability of the computer system that is affected by the stability change;
• computer usable program code for identifying, in response to detecting the stability change, a software application that was installed or updated to the computer system prior to the stability change;
• computer usable program code for identifying a second set of at least one capability of the computer system that is utilized by the identified software application;
• computer usable program code for comparing the first set of at least one capability to the second set of at least one capability to determine a degree of similarity;
• computer usable program code for comparing a first time that the stability change was detected to a second time that the identified software application was installed or updated to determine a temporal proximity;
• and
• computer usable program code for identifying the likelihood that the identified software application is the cause of the stability change, wherein the identified likelihood is a function of the degree of similarity and the temporal proximity.