System and method of security management for a virtual environment

A method for deploying and managing a plurality of software services operating on a plurality of micro-processors, comprising the steps of:

• providing a computing environment operating on the plurality of micro-processors and that includes a plurality of virtualized and non-virtualized platforms to which the plurality of software services each comprising one or more processes can be deployed;
• providing an agent on each of the plurality of virtualized and non-virtualized platforms, wherein each agent can be used to
• manage the one or more processes of a software service, and
• manage resources running on the platform on which it resides, and
• render at least some of the resources as a resource pool accessible to the one or more processes of the software service;
• collecting data via a controller from the agents about operating performance of the computing environment, and using the data collected to enforce policies and to deploy the software services based on a strategy that is most likely to satisfy service level agreements of the services independent of whether the platform is virtualized or non-virtualized,
• wherein the controller provides a layer of abstraction to an operation staff so that resources running on a virtualized platform are not differentiated from resources running on a non-virtualized platform;
• and
• securing communication between each of the plurality of agents and the controller with a mutual authentication method.

A non-transitory machine readable storage medium having instructions stored thereon that when executed cause a system to perform theimrising:

• provide a computing environment that includes a plurality of virtualized and non-virtualized platforms to which a plurality of software services each comprising one or more processes can be deployed;
• provide an agent on each of the plurality of virtualized and non-virtualized platforms, wherein each agent can be used to
• manage the one or more processes of a software service, and
• manage resources running on the platform on which the agent resides, and
• render at least some of the resources as a resource pool accessible to the one or more processes of the software service;
• collect data via a controller from the agents about the current operating performance of the computing environment, and using the data collected to enforce the policies and to deploy the software services based on a strategy that is most likely to satisfy service level agreements of the software services independent of whether the platform is virtualized or non-virtualized,
• wherein the controller provides a layer of abstraction to an operation staff so that resources running on a virtualized platform are not differentiated from resources running on a non-virtualized platform;
• and
• secure communication between each of the plurality of agents and the controller with a mutual authentication method.