System for supervising the security of an architecture

A system for supervising security of a computer architecture, the system comprising, for a first cloud belonging to a plurality of interconnected clouds of the architecture and for the other clouds of the plurality:

• a processing unit;
• and
• a non-transitory memory comprising code instructions stored thereon, which when executed by the processing unit configure the processing unit to:
• receive a security event by a first security controller of the first cloud of the plurality of clouds, wherein each cloud comprises a plurality of resources and a security supervisor, the plurality of resources forming a plurality of resource groups in the cloud that are respectively associated with a security domain, each security domain comprises a security controller supervising the resources of the security domain, a plurality of physical machines comprising resources of the plurality of clouds, wherein the respective security supervisors of the clouds comprise a set of security rules forming a security policy, and wherein said security event originates from a first of the resources associated with a first of the security domains,
• sending by the first security controller of the first cloud said security event to the security supervisor of the first cloud,
• sending by the security supervisor of the first cloud a security order to at least a second security controller of the first cloud in reaction to the security event, and
• sending by the second security controller the security order to a second resource supervised by the second security controller,
• sending by the security supervisor of the first cloud, information relating to the security event to the security supervisors of the other clouds of the plurality of interconnected clouds,
• negotiating a second security order between the security supervisor of the first cloud and the security supervisors of the other clouds, the negotiation being based on information relating to the security event and on the respective security policies of the security supervisors, and
• sending by one of the security supervisors of the other clouds the second security order to at least a third resource, the third resource being included in a cloud of the plurality of interconnected clouds, different from the first cloud.