Methods and apparatus to provide resource security

A method to assess security vulnerabilities associated with a computing resource of a first computing device, the method comprising:

• establishing a secure connection channel with the computing resource, the secure connection channel established based on a certificate specific to the computing resource, the certificate included in a security accessory and the computing resource during development of the security accessory;
• managing, by executing an instruction with a processor of the security accessory, a benchmark targeted to the computing resource, the benchmark including (a) a collection of benchmark profiles and (b) a collection of rules, a benchmark profile of the collection of benchmark profiles instantiated using a subset of the collection of rules, the benchmark to constrain behavior of the computing resource, the security accessory in communication with the computing resource;
• identifying a second computing device with a second instantiation of the computing resource;
• in response to obtaining the benchmark profile, further altering, by executing an instruction with the processor of the security accessory, the subset of the collection of rules included in the benchmark profile by:
• enabling a first rule corresponding to a first type of the computing resource;
• and
• disabling a second rule that does not correspond to the first type of the computing resource;
• identifying a second computing device with a second instantiation of the computing resource;
• testing, by executing an instruction with the processor of the security accessory, the first rule of the benchmark profile against the computing resource;
• when the testing reveals an insufficiency, idempotently remediating, by executing an instruction with the processor of the security accessory, the insufficiency of the computing resource to comply with the first rule of the benchmark profile;
• and
• applying changes to the second computing device based on changes to the benchmark.

A non-transitory computer readable storage medium comprising instructions that, when executed, cause a machine to at least:

• establish a secure connection channel with a computing resource, the secure connection channel established based on a certificate specific to the computing resource, the certificate included in the machine and the computing resource during development of the machine;
• manage a benchmark targeted to the computing resource associated with a computing device, the benchmark to include (a) a collection of benchmark profiles and (b) a collection of rules, a benchmark profile of the collection of benchmark profiles instantiated using a subset of the collection of rules, the benchmark to constrain behavior of the computing resource;
• identify a second computing device with a second instantiation of the computing resource;
• in response to obtaining the benchmark profile, further alter the subset of the collection of rules included in the benchmark profile by:
• enabling a first rule corresponding to a first type of the computing resource;
• and
• disabling a second rule that does not correspond to the first type of the computing resource;
• test the first rule of the benchmark against the computing resource;
• when the testing reveals an insufficiency, idempotently remediate the insufficiency of the computing resource to comply with the first rule of the benchmark profile;
• and
• apply changes to the second computing device based on changes to the benchmark.