# US 7,467,068 B2 · Method and apparatus for detecting dependability vulnerabilities > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 7,467,068 B2 - Document ID: US7467068B2 - Status: Granted - Kind: B2 - Application number: 11/682,207 - Filed: 2007-03-05 - Published: 2008-09-11 - Granted: 2008-12-16 - Earliest claimed: 2007-03-05 - Assignees: International Business Machines Corporation - Inventors: Aaron B. Brown; John W. Sweitzer - Web page: https://patentgrep.com/patent/US7467068B2 ## CPC - H04L 43/50: Testing arrangements - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract The present invention is a method and an apparatus for detecting dependability vulnerabilities in production IT environments. In one embodiment, a method for detecting a dependability vulnerability in a production IT environment includes injecting a synthetic disturbance into the production IT environment and observing the response of the production IT environment to the synthetic disturbance. ## Claims ### Claim 1 A method for detecting a dependability vulnerability in a production information technology environment, the method comprising: injecting at least one synthetic disturbance into the production information technology environment, where the production information technology environment is a deployed, functioning information technology environment; observing a response of the production information technology environment to the at least one synthetic disturbance; and generating a report indicative of one or more dependability vulnerabilities in the production information technology environment, the one or more dependability vulnerabilities being exposed via a response of the production information technology environment to the at least one synthetic disturbance. ### Claim 2 (depends on 1) The method of claim 1, wherein the injecting is performed automatically in accordance with a defined schedule. ### Claim 3 (depends on 1) The method of claim 1, wherein the injecting is performed periodically. ### Claim 4 (depends on 1) The method of claim 1, wherein the at least one synthetic disturbance mimics at least one of: a hardware failure, a software failure, a firmware component failure, resource exhaustion, an unusual workload pattern, a shift in an applied load, a configuration error, a malicious attack, a software installation, a software removal, a hardware installation, a hardware removal, or a human operator error. ### Claim 5 (depends on 1) The method of claim 1, wherein the observing comprises: collecting data relating to an impact of the at least one synthetic disturbance on the production information technology environment; and correlating the data with the injecting in order to detect the existence of one or more dependability vulnerabilities. ### Claim 6 (depends on 5) The method of claim 5, wherein the data relates to at least one of: a workload that the production information technology environment is experiencing or an extent to which the production information technology environment is providing a desired level of functionality, integrity, performance and quality of service. ### Claim 7 (depends on 1) The method of claim 1, further comprising: containing one or more effects of the at least one synthetic disturbance on the production information technology environment. ### Claim 8 (depends on 7) The method of claim 7, wherein the containing is achieved in accordance with at least one of: virtualization technology, network partitioning, recoverable snapshots, change logging, or reverse execution. ### Claim 9 A computer readable storage medium containing an executable program for detecting a dependability vulnerability in a production information technology environment, the program causing a processor to perform the steps of: injecting at least one synthetic disturbance into the production information technology environment, where the production information technology environment is a deployed, functioning information technology environment; observing a response of the production information technology environment to the at least one synthetic disturbance; and generating a report indicative of one or more dependability vulnerabilities in the production information technology environment, the one or more dependability vulnerabilities being exposed via a response of the production information technology environment to the at least one synthetic disturbance. ### Claim 10 A system for detecting a dependability vulnerability in a production information technology environment, the system comprising: means for injecting at least one synthetic disturbance into the production information technology environment, where the production information technology environment is a deployed, functioning information technology environment; means for observing a response of the production information technology environment to the at least one synthetic disturbance; and means for generating a report indicative of one or more dependability vulnerabilities in the production information technology environment, the one or more dependability vulnerabilities being exposed via a response of the production information technology environment to the at least one synthetic disturbance. ### Claim 11 (depends on 10) The system of claim 10, wherein the means for injecting is implemented automatically in accordance with a defined schedule. ### Claim 12 (depends on 10) The system of claim 10, wherein the means for injecting is implemented periodically. ### Claim 13 (depends on 10) The system of claim 10, wherein the means for injecting is configured to inject at least one synthetic disturbance mimicking at least one of: a hardware failure, a software failure, a firmware component failure, resource exhaustion, an unusual workload pattern, a shift in an applied load, a configuration error, a malicious attack, a software installation, a software removal, a hardware installation, a hardware removal, or a human operator error. ### Claim 14 (depends on 10) The system of claim 10, wherein the system wraps around the production information technology environment. ### Claim 15 (depends on 10) The system of claim 10, wherein the means for observing comprises: means for collecting data relating to an impact of the at least one synthetic disturbance on the production information technology environment; and means for correlating the data with the injecting in order to detect the existence of one or more dependability vulnerabilities. ### Claim 16 (depends on 15) The system of claim 15, wherein the data relates to at least one of: a workload that the production information technology environment is experiencing or an extent to which the production information technology environment is providing a desired level of functionality, integrity, performance and quality of service. ### Claim 17 (depends on 10) The system of claim 10, further comprising: means for containing one or more effects of the at least one synthetic disturbance on the production information technology environment. ### Claim 18 (depends on 17) The system of claim 17, wherein the containing is achieved in accordance with at least one of: virtualization technology, network partitioning, recoverable snapshots, change logging, or reverse execution.