Automated security classification and propagation of virtualized and physical virtual machines

A computer-implemented system management method performed by a computer system executing machine-readable instructions, the method, comprising acts of:

• accessing one or more security policies selected from a respective plurality of security models, wherein the plurality of security model are created with the one or more security policies;
• defining security requirements from the security policies selected from the plurality of security models to apply to appropriate functions of a service and associated virtual machines provided by one or more computers over a service lifecycle;
• obtaining and propagating security classifications associated with model characteristics and workload information of the service for inclusion in the security requirements that provide, at least, resource mappings for the service according to a security classification of the workload;
• applying the one or more security policies for security of the one or more computers during the service lifecycle, which includes initial deployment, expansion, moving of servers, monitoring, and reporting;
• and
• configuring a hardware processor to perform the acts of accessing, defining, obtaining, and applying.

A computer-implemented system management method, performed by a computer system executing machine-readable instructions, the method comprising acts of:

• accessing one or more security policies selected from a respective plurality of security models, wherein the plurality of security model are created with the one or more security policies;
• defining security requirements the security policies selected from the plurality of security models to apply to appropriate functions of a service provided by one or more virtual machines over a service lifecycle;
• propagating security classifications associated with model characteristics and workload to the management component for inclusion in the security requirements that provide, at least, resource mappings for the service according to a security classification of the workload;
• applying the propagated information for inclusion in the security requirements to secure the service over a lifecycle of the service, which includes initial deployment, expansion, moving servers, monitoring, and reporting;
• and
• configuring a hardware processor to perform at least one of the acts of accessing, defining, propagating, or applying.