Methods and systems for automated network scanning in dynamic virtualized environments
AssigneeZynga Inc.
InventorsKevin McGinley, Rich Tener
Life of this patent
Estimating the term…
Abstract
Systems and methods for managing jobs to be scanned based on existence of processing nodes are described. One of the methods includes obtaining identification information regarding operation of a first set of the processing nodes from an inventory and creating a job for scanning the processing nodes of the first set for security vulnerability. The job includes the identification information. The method further includes verifying the inventory to determine the first identifying information of the first set of processing nodes for removal from the job and loading the job having second identifying information for a second set of processing nodes that remain after the verifying operation.
Claims20
A method for managing jobs to be scanned based on existence of processing nodes that are part of a cloud network, comprising:
- obtaining identification information regarding operation of a first set of processing nodes from an inventory of the processing nodes in the cloud network, each of the processing nodes of the first set having a non-terminated state;
- creating a job for scanning the processing nodes of the first set for security vulnerability, the job having the identification information;
- verifying the inventory to determine first identifying information of one of the processing nodes of the first set of processing nodes for removal from the job, wherein upon verifying, the first identifying information regarding one of the processing nodes of the first set of processing nodes is removed from the job if the one of the processing nodes of the first set of processing nodes is in a terminated state;
- and
- loading the job having second identifying information for a second set of processing nodes that remain after the verifying.
A system for managing jobs to be scanned based on existence of processing nodes that are part of a cloud network, comprising:
- a memory device configured to store a job creator module and a job loader module;
- and
- a processor configured to execute the job creator module to:
- obtain identification information regarding operation of a first set of processing nodes from an inventory of the processing nodes in the cloud network, each of the processing nodes of the first set having a non-terminated state;
- create a job for scanning the processing nodes of the first set for security vulnerability, the job having the identification information, wherein the processor is configured to execute the job loader module to:
- verify the inventory to determine first identifying information of one of the processing nodes of the first set for removal from the job, wherein upon performing the verification, the processor is configured to remove the first identifying information regarding one of the processing nodes of the first set of processing nodes from the job if the one of the processing nodes of the first set of processing nodes is in a terminated state;
- and
- load the job having second identifying information for a second set of processing nodes that remain after the verification.
A method for managing jobs to be scanned based on existence of processing nodes that are part of a network, comprising:
- obtaining identification information regarding operation of the processing nodes, each of the processing nodes of the first set having a non-terminated state;
- creating a job having the identification information;
- determining identifying information of at least one of the processing nodes for removal from the job;
- removing the determined identifying information of the at least one of the processing nodes when the at least one of the processing nodes is terminated in the network, the identification information being updated after the removing;
- and
- loading the job having the updated identification information for processing nodes that remain after the removing, the loading performed for scanning the remaining processing nodes for vulnerability to security attacks.
Dependencies are inferred from the claim text.