A knowledge-rich similarity measure for improving IT incident resolution process

  • Authors:
  • Yong-Bin Kang;Arkady Zaslavsky;Shonali Krishnaswamy;Claudio Bartolini

  • Affiliations:
  • Monash University, Australia;Monash University, Australia;Monash University, Australia;HP Labs, Palo Alto

  • Venue:
  • Proceedings of the 2010 ACM Symposium on Applied Computing
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

The aim of incident management is to restore a given IT service disruption, simply called incident, to normal state as quickly as possible. In incident management, it is essential to resolve a new incident efficiently and accurately. However, typically, incident resolution process is largely manual, thus, it is time-consuming and error-prone. This paper proposes a new knowledge-rich similarity measure for improving this process. The role of this measure is to retrieve the most similar past incident cases for a new incident without human intervention. The solution information contained the retrieved incident cases can be utilized to resolve the new incident. The main feature of our similarity measure is to incorporate additional useful meta knowledge, outside of incident description that is the only exploited information in typical similarity measures used in CBR, to improve effectiveness. Moreover, this measure exploits as much semantic knowledge as possible about features contained in previous incident cases. Through an experimental evaluation, we show the effectiveness, technical coherence and feasibility of this measure using a real dataset.