Systems and methods for application placement in a network based on host security posture

An application placement system comprising:

• one or more processors;
• and
• at least one non-transitory computer-readable storage medium having stored therein instructions which, when executed by the one or more processors, cause the one or more processors to:
• determine, by a security score service, a respective security posture score for each of a plurality of candidate hosts of an enterprise network, the security posture score for a first host of the candidate hosts being based on a combination of:
• a process hash score as an assessment of process binary hash or file hash consistency across workloads on the first host, or across multiple hosts of the candidate hosts;
• an attack surface score for both the first host and a workload to be placed that measures a number of potential attack surfaces of the first host or the workload;
• a forensics score for the first host that measures the impact of a security incident at the first host a network anomaly score for the first host that measures the severity of a data leak event at the first host;
• and
• a segmentation compliance score for the first host that measures any policy violations associated with candidate host;
• identify, by a user, a set of performance parameters and security parameters for a host in the enterprise network to execute a workload thereon;
• select, by an application placement engine, a host from the plurality of candidate hosts having a security posture score matching the performance parameters and the security parameters for executing the workload;
• and
• place, by an application deployment engine, the workload on the host.

A non-transitory computer-readable storage medium comprising instructions which, when executed by one or more processors of an application placement system, cause the application placement system to:

• determine a respective security posture score for each of a plurality of candidate hosts of an enterprise network, the security posture score for a first host of the candidate hosts being based on a combination of:
• a process hash score as an assessment of process binary hash or file hash consistency across workloads on the first host, or across multiple hosts of the candidate hosts;
• an attack surface score for both the first host and a workload to be placed that measures a number of potential attack surfaces of the first host or the workload;
• a forensics score for the first host that measures the impact of a security incident at the first host;
• a network anomaly score for the first host that measures the severity of a data leak event at the first host;
• and
• a segmentation compliance score for the first host that measures any policy violations associated with candidate host;
• identify a set of performance parameters and security parameters for a host in the enterprise network to execute a workload thereon;
• select a host from the plurality of candidate hosts having a security posture score matching the performance parameters and the security parameters for executing the workload;
• and
• place the workload on the host.