Patent ID: 8977900
Filing Date: 2015-03-10
Classification: G06F,H04L

Abstract:
1. A computer program product stored on a computer readable storage device having computer readable program code embodied thereon that is executable by a data processing system for remediating events using behaviors via an administrator system, the computer program product comprising: computer readable program code for receiving an event from a component of an information technology (IT) environment; computer readable program code for determining a behavior at least partly from the event; computer readable program code for determining that the behavior is an anomalous behavior at least partly from a group of previously received events; computer readable program code for calculating a coefficient via a calculation for the anomalous behavior at least partly from a weight; computer readable program code for sending a description of the anomalous behavior and a group of options to an administrator client, the description is at least partly based on the calculation; computer readable program code for receiving a severity indication from the administrator client; and computer readable program code for updating the weight, the calculation, and the description based on the severity indication.