US 2026/0230419 A1Published application

Methods for Validating Compliance in Disaster Recovery Exercises

AssigneeCapital One Services, LLC

InventorsMichael D. Barnard, Radford Shiozaki, Jae-Hyun Ha

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems, methods, and apparatuses are described for validating compliance in disaster recovery exercises (DREs). In conducting a DRE, a method may collect network data and may enrich the collected network data with application data. The method may simulate the unavailability of a cloud network node, collect network data in the new configuration, compare the two collected network data sets, and determine applications that rely on the simulated unavailable cloud network node. The method may indicate which application was resilient to the simulated unavailable network cloud node based on its determination. By enriching, the method may create a mapping to trace each traffic packet back to a specific application and verify whether the specific application's performance complies with the DRE. Unlike the current methods that lead to time-consuming manual analyses that are prone to false positives, the method may validate compliance in an automated way in a near-real-time fashion.

Claims20

Dependent claims

A computing device configured to proactively monitor application performance on a network to validate compliance during disaster recovery exercises, the computing device comprising:

one or more processors;
and
memory storing instructions that, when executed by the one or more processors, cause the computing device to:
collect first network data by monitoring first packet activity of one or more cloud network nodes that provide access to one or more applications;
enrich the first network data by correlating the first packet activity of the one or more cloud network nodes with at least one of the one or more applications, wherein the enriched first network data indicates, for each application of the one or more applications:
one or more packet transmissions corresponding to the application;
and
a directionality of packet traffic associated with the application;
perform a resiliency exercise by simulating unavailability of at least one of the one or more cloud network nodes;
collect, during the simulated unavailability of the at least one of the one or more cloud network nodes, second network data by monitoring second packet activity of the one or more cloud network nodes that provide access to the one or more applications;
determine, by comparing the enriched first network data and the second network data, whether at least one application of the one or more applications relied on the at least one of the one or more cloud network nodes during the simulated unavailability of the at least one of the one or more cloud network nodes;
and
output, based on whether the at least one application of the one or more applications relied on the at least one of the one or more cloud network nodes during the simulated unavailability of the at least one of the one or more cloud network nodes, an indication of whether the at least one application of the one or more applications was resilient to failure of the at least one of the one or more cloud network nodes.

10 more elements

A method for proactively monitoring application performance on a network to validate compliance during disaster recovery exercises, comprising:

performing a resiliency exercise by simulating unavailability of at least one cloud network node that provide access to at least one application;
collecting, during the simulated unavailability of the at least one cloud network node, network data by monitoring packet activity of the at least one cloud network node that provide access to one or more applications;
enriching the network data by correlating the packet activity of the at least one cloud network node with at least one application, wherein the enriched network data indicates:
one or more packet transmissions corresponding to the at least one application;
and
a directionality of packet traffic associated with the at least one application;
determining, based on the enriched network data, whether the at least one application relied on the at least one cloud network node during the simulated unavailability of the at least one cloud network node;
and
outputting, based on whether the at least one application relied on the at least one cloud network node during the simulated unavailability of the at least one cloud network node, an indication of whether the at least one application was resilient to failure of the at least one cloud network node.

6 more elements

One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors of a computing device, cause the computing device to:

collect first network data by monitoring first packet activity of one or more cloud network nodes that provide access to one or more applications;
enrich the first network data by correlating the first packet activity of the one or more cloud network nodes with at least one of the one or more applications, wherein the enriched first network data indicates, for each application of the one or more applications:
one or more packet transmissions corresponding to the application;
and
a directionality of packet traffic associated with the application;
perform a resiliency exercise by simulating unavailability of at least one of the one or more cloud network nodes;
collect, during the simulated unavailability of the at least one of the one or more cloud network nodes, second network data by monitoring second packet activity of the one or more cloud network nodes that provide access to the one or more applications;
determine, by comparing the enriched first network data and the second network data, whether at least one application of the one or more applications relied on the at least one of the one or more cloud network nodes during the simulated unavailability of the at least one of the one or more cloud network nodes;
and
output, based on whether the at least one application of the one or more applications relied on the at least one of the one or more cloud network nodes during the simulated unavailability of the at least one of the one or more cloud network nodes, an indication of whether the at least one application of the one or more applications was resilient to failure of the at least one of the one or more cloud network nodes.

7 more elements

Dependencies are inferred from the claim text.