Method for detecting intrusions on a set of virtual resources

An apparatus comprising:

• a control device for detecting intrusions on a set of virtual resources in a computing system comprising at least two physical machines hosting said set of virtual resources, the control device comprising:
• a processing unit,
• memory, comprising:
• instructions executable by the processing unit to calculate an itinerary, designed to calculate an intrusion detection itinerary defined by a suite of virtual resources to be monitored on the basis of the virtual resources of said set, added to and ordered in the suite as a function of respective vulnerability criticality levels assigned to the virtual resources of said set,
• instructions executable by the processing unit to detect intrusions by following the calculated itinerary, and
• instructions executable by the processing unit to change the order of virtual resources in the itinerary when the itinerary comprises, in order:
• a first resource with a specific vulnerability criticality level, said first resource being hosted by a first physical machine,
• a second resource with the same vulnerability criticality level as the first resource, said second resource being hosted by a second physical machine, and
• a third resource with the same vulnerability criticality level as the first and the second resources, said third resource being hosted by the first physical machine,
• the order of the second and the third resources in the itinerary being changed in order to execute the operation for intrusion detection first on the first physical machine for the first and third resources and next on the second physical machine for the second resource.

A hardware storage medium comprising a program recorded thereon and loadable into memory of a computer, the program comprising code portions for execution of a method, when the program is executed on said computer, wherein the method comprises:

• detecting intrusions on a set of virtual resources in a computing system comprising at least two physical machines hosting said set of virtual resources, wherein detecting comprises steps of:
• calculation of an intrusion detection itinerary defined by a suite of virtual resources of said set, which are integrated and ordered in the suite as a function of respective vulnerability criticality levels assigned to the virtual resources of said set, and
• execution of an operation of detecting intrusions by following the calculated itinerary, wherein the method includes when the itinerary comprises, in order:
• a first resource with a specific vulnerability criticality level, said first resource being hosted by a first physical machine,
• a second resource with the same vulnerability criticality level as the first resource, said second resource being hosted by a second physical machine, and
• a third resource with the same vulnerability criticality level as the first and the second resources, said third resource being hosted by the first physical machine,
• the order of the second and the third resources in the itinerary is changed in order to execute the operation of detecting intrusions first on the first physical machine for first and third resources and next on the second physical machine for the second resource.