Automated deployment and securitization of model-based composite applications

A computer system arranged to deploy a software application in a virtualized computing environment comprising:

• an interface, whereby a description of a software application for deployment in a virtualized computing environment is received, the description including an identification of a set of one or more application software resources;
• a security requirement determiner arranged to determine one or more types of security facility required for the set of application software resources and to determine a security requirement for each of the determined types of security facility;
• a security software resource selector arranged to select a security software resource for each of the determined types of security facility;
• a security configuration determiner arranged to determine a security configuration for each of the selected security software resources, the security configuration being based on a security requirement associated with a type of security facility for the security software resource;
• and
• a deployment specification generator arranged to generate a deployment specification for the software application specifying the application software resources and the security software resources for deployment of the application in the virtualized computing environment, each of the security software resources having associated the determined security configuration.

A computer system comprising a memory and a processor, the processor being arranged to:

• receive a description of a software application for deployment in a virtualized computing environment, the description including an identification of a set of one or more application software resources;
• determine one or more types of security facility required for the set of application software resources and determining a security requirement for each of the determined types of security facility;
• select a security software resource for each of the determined types of security facility;
• determine a security configuration for each of the selected security software resources, the security configuration being based on a security requirement associated with a type of security facility for the security software resource;
• and
• generate a deployment specification for the software application specifying the application software resources and the security software resources for deployment of the application in the virtualized computing environment, each of the security software resources having associated the determined security configuration.