Zenprise, Inc.

Citrix Systems, Inc.

Vmware, Inc.

Kelly Brian Roach

Waheed Qureshi

Tanvir Hassan

John M McGinty

Olivier Andre

Shafaq Abdullah

Thomas H DeBenning

Ahmed Datoo

Sekou Page

Andrew Yousef

John David Shirley

Gregory P Bala

Nathan Watson

Thomas H Debenning

John M Mcginty

A system is disclosed that includes components and features for enabling enterprise users to securely access enterprise resources (documents, data, application servers, etc.) using their mobile devices. An enterprise can use some or all components of the system to, for example, securely but flexibly implement a BYOD (bring your own device) policy in which users can run both personal applications and secure enterprise applications on their mobile devices. The system may, for example, implement policies for controlling mobile device accesses to enterprise resources based on device attributes (e.g., what mobile applications are installed), user attributes (e.g., the user's position or department), behavioral attributes, and other criteria. Client-side code installed on the mobile devices may further enhance security by, for example, creating a secure container for locally storing enterprise data, creating a secure execution environment for running enterprise applications, and/or creating secure application tunnels for communicating with the enterprise system.

Secure execution of enterprise applications on mobile devices

Some embodiments of the invention provide a novel method for monitoring instances of an application operating on a set of mobile devices. In some embodiments, the method receives content data to be used by the application and injects monitoring code into the content data before providing it to a web view of the application. In some embodiments, the content data includes various types of content (e.g., multimedia files, scripts, data files, etc.) received from a content server managed by the developer of the application and may be used by the native code and/or the web view of the hybrid application. The content data of some embodiments also includes monitoring code that is inserted by the developer of the application to monitor developer-specified events in the native code and/or web view. The method of some embodiments gathers monitored data from both the native code and the web view.

Monitoring for hybrid applications

Secure container for protecting enterprise data on a mobile device

Secure mobile browser for protecting enterprise data

A method of encoding knowledge is disclosed, which can be used to automatically detect problems in software application deployments. The method includes accessing a source of knowledge describing a problem known to occur in deployments of a particular software application, and which identifies a plurality of conditions associated with the problem. An encoded representation of the knowledge source is generated according to a predefined knowledge encoding methodology. The encoded representation is adapted to be applied automatically by a computer to analyze data representing a current state of a monitored deployment of the software application to detect whether the conditions and the problem exist therein. In various implementations, the encoded representation of the knowledge can include queries for deployment information, information concerning the relative importance of the conditions to a detection of the problem, and/or logical constructs for computing a confidence value in the existence of the problem and for determining whether to report the problem if some of the conditions are not true. The knowledge source can comprise a text document (such as a knowledge base article), a flowchart of a diagnostic troubleshooting method, and the like. Also disclosed are methods of at least partially automating the encoding process.

Systems and methods for encoding knowledge for automated management of software application deployments

A rule stored in a tangible computer-readable memory is adapted to be programmatically applied by a computer to automatically detect occurrences of a particular problem in a deployment of a software application. The rule comprises a plurality of atomic gates and a plurality of operator gates. The atomic gates have predicates for detecting occurrences of a plurality of conditions in the software application deployment. The operator gates are configured to detect predefined logical combinations of outputs of the atomic gates to generate a rule output that indicates whether the problem is currently detected in the deployment. The rule contains a plurality of free logical variables which can be assigned values. The free logical variables are configured for use in input pattern matching and output binding substitutions to supply information to a remedy for the problem. Each substitution comprises an assignment of a value to a variable.

Encoded software management rules having free logical variables for input pattern matching and output binding substitutions to supply information to remedies for problems detected using the rules

Computer systems and methods are disclosed for managing a deployment of a software application. One system includes an application model describing the deployment, the application model comprising a representation of physical and logical objects in a domain of the deployment, configuration data about the objects, and information about relationships between the objects. The system also includes a root cause analysis module configured to identify one or more problematic objects of the application model, and to use pattern-recognition on the application model to find root cause candidates that may be a root cause of one or more problems associated with the problematic objects. The root cause analysis module can be further configured to apply diagnostic unit tests on one or more objects associated with the root cause candidates, the diagnostic unit tests configured to narrow down a list of possible root causes of the problems. Various pattern-recognition techniques are disclosed, including looking for recent property or configurational changes in the application model, clustering of problematic objects, examining links between objects in the application model, comparisons between pairs of non-problematic objects as well as between problematic objects and non-problematic objects, temporal comparisons of the state of the application model, and examining objects that are near the problematic objects in the application model.

Automated root cause analysis of problems associated with software application deployments

A system for managing a deployment of a software application is disclosed. The system includes a telemetry component that collects data values of state metrics associated with the deployment, an application model that represents the deployment, a repository of encoded knowledge describing known problems associated with the software application, and an analysis subsystem that programmatically maps logical combinations of features associated with the deployment to known problems. The application model includes a representation of physical and logical objects in a domain of the deployment, and configuration data about the objects. The analysis subsystem is adapted to query the application model for information about the deployment. The application model can implement a discovery process to construct itself by using an abstract model of a generalized deployment of the software application, the discovery process including obtaining information from the managed deployment.

Application model for automated management of software application deployments

A system for monitoring and analyzing a deployment of a software application is disclosed. The system includes a monitoring component that collects streams of data values of time-variant state metrics associated with the deployment, and a feature detector that analyzes the streams to identify features known to be associated with potential problems. Detected features can include deviations of a signal from a normalcy band, a rising or descending trend in signal behavior, deviations from seasonal or cyclical normalcy bands, and the like.

Systems and methods for detecting behavioral features of software application deployments for automated deployment management

Computer-implemented systems and methods for managing a deployment of a software application are disclosed. A method includes identifying problems with the deployment, each problem having a severity rating. For each identified problem, one or more associated remedies are identified, each remedy having a severity rating based on the severity rating of the problem with which the remedy is associated. The method further includes ranking the remedies based on the remedies' severity ratings. The remedies can be executed in order of rank. Also disclosed are systems and methods of preventing simultaneous execution of certain types of remedies, either on the deployment in general or on a set of components of the deployment. Also disclosed are methods for logging the results of executed remedies and their effect on deployment health.

Automated remedying of problems in software application deployments

Systems and methods for managing a deployment of a software application are disclosed. One system comprises a machine-readable repository of rules describing problems associated with the software application, a monitoring component that collects state metrics from the deployment, and a problem detector that programmatically uses the rules to map combinations of the collected state metrics to problems.

Systems and methods for automated management of software application deployments

Systems and methods for obtaining information about a deployment of a software application are disclosed. One system comprises a plurality of deployment servers running components of the software application deployment, a plurality of monitors associated with the deployment servers, and an analysis subsystem that generates requests for state metrics from the deployment, based on rules describing known problems with the software application. The analysis subsystem transmits each request for state metrics to a monitor associated with a deployment server that is associated with the request. The monitors are configured to receive the requests for state metrics from the analysis subsystem and collect the state metrics from one of the components of the software application deployment. The monitors, which can reside on the deployment servers or locally with respect to the analysis subsystem, can transmit the collected state metrics back to the analysis subsystem. An application model storing a representation of objects of the deployment can also be provided, wherein the analysis subsystem queries the application model for deployment information necessary to transmit the requests for state metrics to appropriate ones of the monitors. The monitors can be configured to conduct post-processing of collected state metrics, and also to prevent redundant collection.

Growing community of inventors

Palo Alto, CA, United States of America

Kelly Brian Roach