System and method for real-time asynchronous multitenant gateway security

A computer-implemented method, comprising:

• receiving, by a management component from a global event stream, an event via a stream listener component, wherein the event includes event type information and event content information,
• determining, by the management component, that the event content information includes at least a portion of service transaction information that is associated with an external service request received by a reverse proxy component and the at least portion of the service transaction information partially matches service transaction information that is registered with the management component by the reverse proxy component,
• determining, by the management component, that the event is a security event, based on the event type information, wherein the security event indicates that an internal service request generated by the reverse proxy component based at least on the external service request and transmitted to a service of an application has been identified as a security threat;
• determining, by the management component, whether at least a portion of an external content response has been transmitted via a validated connection having associated service transaction information that partially matches at least a portion of the service transaction information received in the security event, and that the validated connection has not been disconnected;
• and
• interrupting, by the management component, the reverse proxy component to invalidate the external content response based on protocol specific rules, and to disconnect the validated connection, after determining that the at least portion of the external content response has been transmitted to the client device, and that the validated connection has not been disconnected, wherein to disconnect the validated connection, the method further comprises:
• terminating, by the reverse proxy component, the validated connection;
• publishing, by the reverse proxy component, a disconnection event to the global event stream via a stream publisher component, wherein the published disconnection event indicates that the validated connection has been terminated;
• de-registering, by the reverse proxy component, the service transaction information associated with the validated connection from the management component;
• and
• de-allocating, by the reverse proxy component, one or more allocated resources utilized in processing the external service request.

A non-transitory tangible computer-readable device having instructions stored thereon that, when executed by at least one computing device, causes the at least one computing device to perform operations comprising:

• receiving, by a management component from a global event stream, an event via a stream listener component, wherein the event includes event type information and event content information,
• determining, by the management component, that the event content information includes at least a portion of service transaction information that is associated with an external service request received by a reverse proxy component and the at least portion of the service transaction information partially matches service transaction information that is registered with the management component by the reverse proxy component,
• determining, by the management component, that the event is a security event, based on the event type information, wherein the security event indicates that an internal service request generated by the reverse proxy component based at least on the external service request and transmitted to a service of an application has been identified as a security threat;
• determining, by the management component, whether at least a portion of an external content response has been transmitted via a validated connection having associated service transaction information that partially match the at least portion of the service transaction information received in the security event, and that the validated connection has not been disconnected;
• and
• interrupting, by the management component, the reverse proxy component to invalidate the external content response based on protocol specific rules, and to disconnect the validated connection, after determining that the at least portion of the external content response has been transmitted to the client device, and that the validated connection has not been disconnected wherein to disconnect the validated connection, the operations further comprise:
• terminating, by the reverse proxy component, the validated connection;
• publishing, by the reverse proxy component, a disconnection event to the global event stream via a stream publisher component, wherein the published disconnection event indicates that the validated connection has been terminated;
• de-registering, by the reverse proxy component, the service transaction information associated with the validated connection from the management component;
• and
• de-allocating, by the reverse proxy component, one or more allocated resources utilized in processing the external service request.