Method and system to detect discrepancy in infrastructure security configurations from translated security best practice configurations in heterogeneous environments

A system comprising:

• an infrastructure security server communicatively coupled with a set of heterogeneous infrastructures:
• to translate at least one of a set of security best practice configurations of the heterogeneous infrastructures and a set of common vulnerabilities and exposures (CVE) of the heterogeneous infrastructures to programmatic execution;
• to monitor infrastructure security configurations associated with the heterogeneous infrastructures using a processor and a memory of the infrastructure security server;
• to analyze the infrastructure security configurations associated with the heterogeneous infrastructures based on at least one of the translated security best practice configurations and the translated common vulnerabilities and exposures (CVE);
• to detect at least one of:
• a discrepancy of the infrastructure security configurations from the translated security best practice configurations, and
• the translated CVE in the infrastructure security configurations;
• to alert a set of devices and a user through at least one communication channel about any discrepancy of the infrastructure security configurations from the translated security best practice configurations and any translated CVE in the infrastructure security configurations;
• and
• to suggest modifications of the infrastructure security configurations associated with the heterogeneous infrastructures as a remediation for the discrepancy and the CVE,
• wherein the modifications of the infrastructure security configurations is at least one of a manual, a semi automatic, and a fully automatic.

An apparatus comprising:

• an infrastructure security server;
• and
• a set of heterogeneous infrastructures communicatively coupled with the infrastructure security server to:
• translate at least one of a set of security best practice configurations of the heterogeneous infrastructures and a set of common vulnerabilities and exposures (CVE) of the heterogeneous infrastructures to programmatic execution;
• monitor infrastructure security configurations associated with the heterogeneous infrastructures using a processor and a memory of the infrastructure security server;
• analyze the infrastructure security configurations associated with the heterogeneous infrastructures based on at least one of the translated security best practice configurations and the translated common vulnerabilities and exposures (CVE);
• detect at least one of:
• a discrepancy of the infrastructure security configurations from the translated security best practice configurations, and the translated CVE in the infrastructure security configurations;
• alert a set of devices and a user through at least one communication channel about any discrepancy of the infrastructure security configurations from the translated security best practice configurations and any translated CVE in the infrastructure security configurations;
• and
• suggest modifications of the infrastructure security configurations associated with the heterogeneous infrastructures as a remediation for the discrepancy and the CVE,
• wherein the modifications of the infrastructure security configurations is at least one of a manual, a semi-automatic, and a fully automatic.

A method of an infrastructure security server communicatively coupled with a set of heterogeneous infrastructures, comprising:

• translating at least one of a set of security best practice configurations of the heterogeneous infrastructures and a set of common vulnerabilities and exposures (CVE) of the heterogeneous infrastructures to programmatic execution;
• monitoring infrastructure security configurations associated with the heterogeneous infrastructures using a processor and a memory of the infrastructure security server;
• analyzing the infrastructure security configurations associated with the heterogeneous infrastructures based on at least one of the translated security best practice configurations and the translated common vulnerabilities and exposures (CVE);
• detecting at least one of:
• any discrepancy of the infrastructure security configurations from the translated security best practice configurations, and
• any translated CVE in the infrastructure security configurations;
• and
• suggesting modifications of the infrastructure security configurations associated with the heterogeneous infrastructures as a remediation for the discrepancy and the CVE,
• wherein the modifications of the infrastructure security configurations is at least one of a manual, a semi-automatic, and a fully automatic.