Resource appropriation in a multi-tenant environment using risk and value modeling systems and methods

Abstract

Described embodiments provide systems and methods for resource appropriation in a multi-tenant environment using risk and value modeling. A resource server can provide a plurality of applications access to a plurality of resources in response to requests from clients based in part on risk scores and value scores. The resource server can generate and execute a risk model and a value model to determine a risk score and a value score for each of the applications. The resource server can use the risk and value scores to determine access to a particular resource for a requested application. The resource server can assign a first allocation of resource tokens to an application. The resource tokens can correspond to access privileges to plurality of resources. The resource server can dynamically modify the resource allocation for applications responsive to changes to a risk score or value score of a respective application.

We claim: 
     
         1 . A method comprising:
 assigning, by one or more processors, an allocation of tokens to an application hosted in a computing environment and accessed by a plurality of clients, the tokens corresponding to access privileges to one or more resources of the computing environment;   determining, by the one or more processors, an increase in a risk score for the application using one or more characteristics of the requests to the application, the risk score indicating a risk level of the application; and   decreasing, by the one or more processors, the allocation of tokens to the application responsive to the increase in the risk score.   
     
     
         2 . The method of  claim 1 , further comprising determining, by the one or more processors, the increase in the risk score for the application using one or more characteristics of execution of the application. 
     
     
         3 . The method of  claim 1 , further comprising determining, by the one or more processors, an increase in a value score for the application using one or more properties of the one or more clients of the plurality of clients accessing the application, the value score indicating a level of importance of the application to the one or more clients. 
     
     
         4 . The method of  claim 3 , further comprising increasing, by the one or more processors, the allocation of tokens to the application responsive to the increase in the value score. 
     
     
         5 . The method of  claim 3 , further comprising determining, by the one or more processors, the value score for the application using one or more properties of the application. 
     
     
         6 . The method of  claim 3 , further comprising using, by the one or more processors, a value model to determine the value score based at least on an input of one or more properties of the one or more clients of the plurality of clients accessing the application. 
     
     
         7 . The method of  claim 1 , further comprising using, by the one or more processors, a risk model to determine the risk score based at least on an input of one or more characteristics of the requests to the application. 
     
     
         8 . A method comprising:
 assigning, by one or more processors, an allocation of tokens to an application hosted in a computing environment and accessed by a plurality of clients, the tokens corresponding to access privileges to one or more resources of the computing environment;   determining, by the one or more processors, an increase in a value score for the application using one or more properties of the one or more clients of the plurality of clients accessing the application, the value score indicating a level of importance of the application to the one or more clients; and   increasing, by the one or more processors, the allocation of tokens to the application responsive to the increase in the value score.   
     
     
         9 . The method of  claim 8 , further comprising decreasing, by the one or more processors, the allocation of tokens to the application responsive to a decrease in the value score. 
     
     
         10 . The method of  claim 8 , further comprising determining, by the one or more processors, the value score for the application using one or more properties of the application. 
     
     
         11 . The method of  claim 8 , further comprising using, by the one or more processors, a value model to determine the value score based at least on an input of one or more properties of the one or more clients of the plurality of clients accessing the application. 
     
     
         12 . The method of  claim 8 , further comprising determining, by the one or more processors, an increase in a risk score for the application using one or more characteristics of the requests to the application, the risk score indicating a risk level of the application. 
     
     
         13 . The method of  claim 12 , further comprising determining, by the one or more processors, the increase in the risk score for the application using one or more characteristics of execution of the application. 
     
     
         14 . The method of  claim 12 , further comprising decreasing, by the one or more processors, the allocation of tokens to the application responsive to the increase in the risk score. 
     
     
         15 . The method of  claim 11 , further comprising using, by the one or more processors, a risk model to determine the risk score based at least on an input of one or more characteristics of the requests to the application. 
     
     
         16 . A system comprising
 one or more processors, coupled to memory, and configured to:   assign an allocation of tokens to an application hosted in a computing environment and accessed by a plurality of clients, the tokens corresponding to access privileges to one or more resources of the computing environment;   determining, by the one or more processors, a change in at least one of a risk score or a value score of the application, wherein the risk score indicates a risk level of the application and the value score indicates a level of importance of the application to the one or more clients.   changing, by the one or more processors, the allocation of tokens to the application responsive to the change in at least one of the risk score or the value score of the application.   
     
     
         17 . The system of  claim 16 , wherein the allocation of tokens to the application is decreased responsive to the increase in the risk score. 
     
     
         18 . The system of  claim 16 , wherein the allocation of tokens to the application is increased responsive to the increase in the value score. 
     
     
         19 . The system of  claim 16 , wherein the one or more processors are further configured to determine the risk score using one or more characteristics of the requests to the application. 
     
     
         20 . The system of  claim 16 , wherein the one or more processors are further configured to determine the value score using one or more properties of the one or more clients of the plurality of clients accessing the application.