Sequencing virtual machines

A computer system for sequencing virtual machines in a shared pool of configurable network computing resources, comprising:

• a database configured to store profiles of the virtual machines within the shared pool of configurable network computing resources;
• a network element having a processor configured to deploy virtual machines;
• and
• a computing device communicatively coupled to the database and the network element, the computing device comprising:
• a network interface;
• a display unit configured to alert a user of a security incident;
• and
• a processor coupled to the memory, the display unit, and the network interface;
• wherein the processor is configured to characterize at least one of computing element for two or more virtual machines into a respective two or more profiles, wherein the at least one computing element comprises one or more of network ports, subnetworks, virtual local area networks (VLAN), security settings, application instances, operating system version, or operating system patches, each virtual machine corresponding to a respective profile of the two or more profiles;
• wherein the processor is further configured to send the two or more profiles of the virtual machines via the network interface to the database for storage;
• wherein the processor is further configured to identify a first group of virtual machines and a second group of virtual machines, the first group of virtual machines being vulnerable to an identified security incident in the shared pool of configurable network computing resources, and the second group of virtual machines not being vulnerable to the identified security incident in the shared pool of configurable network computing resources;
• wherein the processor is further configured to compare profiles of the first group of virtual machines with profiles of the second group of virtual machines, wherein the comparison includes analyzing the profiles of the first group of virtual machines and the profiles of the second group of virtual machines to identify at least one difference between computing elements in the profiles of the first group of virtual machines and computing elements in the profiles of the second group of virtual machines and calculating an amount of computing resources required to alter the computing elements corresponding to the at least one difference in the first group of virtual machines;
• and
• wherein the processor is further configured to determine an alteration plan to modify one or more computing elements for virtual machines in the first group of virtual machines to reduce a likelihood of susceptibility to the identified security incident based on the comparison of the profiles of the first group of virtual machines with the profiles of the second group of virtual machines.

A program product comprising a computer-readable storage medium having program instructions embodied thereon, wherein the program instructions are configured, when executed by at least one programmable processor, to cause the at least one programmable processor to:

• characterize at least one computing element for two or more virtual machines into a respective two or more profiles, wherein the at least one computing element comprises one or more of network ports, subnetworks, virtual local area networks (VLAN), security settings, application instances, operating system version, or operating system patches, wherein each virtual machine corresponds a respective profile of the two or more profiles;
• identify a first group of virtual machines and a second group of virtual machines, wherein the first group of virtual machines corresponds to a security incident in a shared pool of configurable network computing resources, and wherein the second group of virtual machines does not correspond to the security incident in the shared pool of configurable network computing resources;
• compare, in response to identifying the first group of virtual machines with the security incident, profiles of the first group of virtual machines with profiles of the second group of virtual machines, wherein the comparison includes analyzing the profiles of the first group of virtual machines and the profiles of the second group of virtual machines to identify at least one difference between computing elements in the profiles of the first group of virtual machines and computing elements in the profiles of the second group of virtual machines and calculating an amount of computing resources required to alter the computing elements corresponding to the at least one difference in the first group of virtual machines;
• and
• determine an alteration plan to modify one or more computing elements for virtual machines in the first group of virtual machines to reduce a likelihood of susceptibility to the security incident based on the comparison of the profiles of the first group of virtual machines with the profiles of the second group of virtual machines.