Non-intrusive method and apparatus for automatically dispatching security rules in cloud environment

A non-intrusive apparatus for automatically dispatching a plurality of security rules in a cloud environment, comprising:

• a composition application model forming means for forming a composition application model of an application in the cloud environment, wherein said composition application model comprises various servers for deploying said application;
• a topology model generating means for generating a topology model of said various servers in the cloud environment;
• a security rule generating means for automatically generating a plurality of security rules to be adopted by a plurality of server-side firewalls for respective various servers based on the following:
• (i) the application context of said application, (ii) said composition application model, and (iii) said topology model;
• and
• a security rule dispatching means for dispatching said plurality of security rules to each server-side firewall based on said composition application model and topology model.

A computer readable non-transitory article of manufacture tangibly embodying computer readable instructions which, when executed, cause a computer to carry out the steps of a method comprising:

• forming a composition application model of an application in the cloud environment, wherein said composition application model comprises various servers for deploying said application;
• generating a topology model of said various servers in the cloud environment;
• automatically generating a plurality of security rules to be adopted by a plurality of server-side firewalls for respective various servers based on an application context of the following:
• (i) said application, (ii) said composition application model, (iii) and said topology model;
• and
• dispatching said plurality of security rules to each server-side firewall based on said composition application model and said topology model.