Periodic filesystem integrity checks

Abstract

Described are techniques used in monitoring the performance, security and health of a system used in an industrial application. Agents included in the industrial network report data to an appliance or server. The appliance stores the data and determines when an alarm condition has occurred. Notifications are sent upon detecting an alarm condition. The alarm thresholds may be user defined. A threat thermostat controller determines a threat level used to control the connectivity of a network used in the industrial application.

1 - 166 . (canceled)  
   
   
       167 . A method for performing periodic filesystem integrity checks comprising: 
 receiving two or more sets of filesystem entries, each set representing a grouping of one or more filesystem entries;    selecting zero or more entries from each set; and    performing integrity checking for each selected entry from each set during a reporting period.    
   
   
       168 . The method of  claim 167 , wherein each of said two or more sets correspond to a predetermined classification level.  
   
   
       169 . The method of  claim 168 , wherein if a first classification level is more important than a second classification level, said first classification level includes less entries than said second classification level.  
   
   
       170 . The method of  claim 168 , wherein a number of entries from each set is determined in accordance with a level of importance associated with said set.  
   
   
       171 . A computer program product for performing periodic filesystem integrity checks comprising code that: 
 receives two or more sets of filesystem entries, each set representing a grouping of one or more filesystem entries;    selects zero or more entries from each set; and    performs integrity checking for each selected entry from each set during a reporting period.    
   
   
       172 . The computer program product of  claim 171 , wherein each of said two or more sets correspond to a predetermined classification level.  
   
   
       173 . The computer program product of  claim 172 , wherein if a first classification level is more important than a second classification level, said first classification level includes less entries than said second classification level.  
   
   
       174 . The computer program product of  claim 172 , wherein a number of entries from each set is determined in accordance with a level of importance associated with said set.