Back to results
US 10,503,914 B2Granted
Techniques for security auditing of cloud resources
AssigneeMicro Focus Software Inc.
InventorsJason Allen Sabin, Michael John Jorgensen, Lloyd Leon Burch, Jeremy Ray Brown, Nathaniel Brent Kranendonk, Kal A. Larsen, Michael Fairbanks, Matthew Holt
Life of this patent
Estimating the term…
Abstract
Techniques for security auditing of cloud resources are provided. A virtual machine (VM) is captured and isolated when a session indicates that a session with the VM has terminated. Security checks are executed against the VM in the isolated environment. Results from the security checks are then reported.
Claims19
A method for security auditing of cloud resources, comprising:
- capturing and encrypting events raised by a logical processing environment from a cloud during execution within the logical processing environment, wherein capturing further includes capturing keys typed within the logical processing environment as the events that are encrypted, and storing the encrypted events in an encrypted data store that is external to the logical processing environment;
- upon detection of termination of the logical processing environment, migrating the logical processing environment as an image of the logical processing environment to an isolated environment that lacks network connectivity;
- decrypting the encrypted events within the isolated environment;
- validating each of the events within the isolated environment;
- and
- reporting results of validating each of the events.
3 more elements
A method for security auditing of cloud resources, comprising:
- recording events representing actions taking place within a logical processing environment processing within a cloud, wherein recording further includes recording the actions as keys typed within the logical processing environment;
- encrypting the events as encrypted events;
- storing the encrypted events in an encrypted data store that is external to the logical processing environment;
- taking an image of the logical processing environment upon detection of a particular event and transferring the image to an isolated environment that lacks network connectivity;
- forcing a termination of the logical processing environment when the particular event did not terminate the processing of the logical processing environment within the cloud;
- loading and initiating the logical processing environment within the isolated environment;
- decrypting the encrypted events from the encrypted data store as decrypted events;
- processing each of the decrypted events within an initiated instance of the logical processing environment and within the isolated environment;
- and
- reporting results from processing each of the decrypted events.
7 more elements
A system for security auditing of cloud resources, comprising:
- a first set of cooperating processors organized as a first logical processing environment representing a cloud;
- a second set of cooperating processors organized as a second logical processing environment representing an isolated cloud that lacks network connectivity;
- and
- the first set of cooperating processors configured to:
- detect events for actions being processed within the first logical processing environment, when the actions include keys typed within the first logical processing environment;
- encrypt the events as encrypted events;
- store the encrypted events in an encrypted data store externally from the first logical processing environment;
- detect a particular event for the events;
- take an image of the first logical processing environment based on the particular event;
- and
- terminate processing associated with the first logical processing environment;
- the second set of cooperating processors configured to:
- load the image for processing within the second logical processing environment;
- initiate the image for processing within the second logical processing environment;
- decrypt the encrypted events as decrypted events;
- process the decrypted events;
- and
- report an indication for results associated with processing the decrypted events.
15 more elements
Dependencies are inferred from the claim text.