Abstract: A method, system, and computer program product for the automatic detection and fixing of security vulnerabilities in both individual software components and across complex, multi-component software solutions. The architecture of the software solution to be monitored is analyzed prior to its being monitored. Data derived from the analysis is used to proactively identify possible ways to attack the software solution. The software solution being monitored and the system on which it runs is periodically scanned, and attacks on it are attempted. A list of possible attacks is continuously updated, for example, in a manner similar to virus signatures provided by virus security companies, and a log is generated describing which attacks were successful and which ones failed.

Abstract: Techniques are disclosed for efficiently analyzing measurement data for business processes (for example, in a service provider environment). Business process-aware modules or “cubes” are created from the measurement data, using features of a spatially-enabled database system. A “drill-down” approach is provided for investigating underlying information for a cube (including lower-level linked cubes). Data types other than cubes, such as planes from which a cube is constructed, may also be analyzed. The disclosed techniques may be used to provide autonomic systems, which are self-aware, at a business process level. That is, based on results of analyzing data represented by a cube, autonomic adjustments may be made. In a service provider environment, the analysis and/or the autonomic adjustments may be directed toward enabling the service provider to avoid jeopardizing commitments in service level agreements (and the revenue loss that may result when the commitments are not met).