Loading patent…
AssigneeInternational Business Machines Corporation
InventorsIvan Dell'Era, Kevin R. O'Connor, William J. Rippon
Estimating the term…
A security control point (SCP) that protects target computing system is tested in-place and while active. The approach is initiated the SCP receiving and processing one or more “simulated” communication flows. To this end, a test initiator system is configured to generate and transmit communication flows to the SCP being tested. The SCP extracts the encapsulated flow, and then processes that flow through one or more of the SCP's configured protection mechanisms. Thus, the SCP processes the simulated communication flow as though it were a real session, and thus to determine what actions, if any, should be taken with respect to that flow. After processing, the simulated session traffic is shunted or otherwise diverted away from the target computing system. The results of the SCP's processing, however, are output to other systems (e.g., logging or alerting mechanisms), or they are returned to the test initiation system, e.g., for correlation, reporting, and the like.
A method of testing in a live production environment comprising:
Apparatus for testing in a live production environment, the live production having a security control point that is active in the live protection environment, the security control point having a configured set of one or more protection mechanisms that are applied to data packets passed to the security control point;
A computer program product in a non-transitory computer readable medium for use in a data processing system for testing in a live production environment, the live production having a security control point that is active in the live protection environment, the security control point having a configured set of one or more protection mechanisms that are applied to data packets passed to the security control point, the computer program product holding computer program instructions executed in the data processing system and configured to:
A method of testing in a live production environment in which a production system is protected by a security control point, the security control point having an associated set of one or more protection mechanisms that are applied to data packets passed to the security control point, comprising:
Dependencies are inferred from the claim text.