Decoupling hardware and software components of network security devices to provide security software as a service in a distributed computing environment

摘要

Concepts and technologies are disclosed herein for decoupling hardware and software components of network security devices to provide security software as a service in a distributed computing environment. A computer system includes a processor that can execute computer-executable instructions to perform various operations. The processor can perform operations to provide security services to one or more customer platforms. The operations can include receiving a network security software component from a security service provider, and deploying the network security software component within a distributed computing environment so that the network security software component can be executed by a computing resource of the distributed computing environment to provide a security service to the customer platform(s). The network security software component includes a software component that has been decoupled from a hardware component of a network security device by the security service provider.

主权项

1. A computer system, comprising:
a processor; and a memory that stores computer-executable instructions which, when executed by the processor, cause the processor to perform operations comprising:
receiving a network security software component from a security service provider, wherein the network security software component has been decoupled from a hardware component of a network security device by the security service provider,deploying the network security software component within a distributed computing environment so that the network security software component can be executed by a computing resource associated with the distributed computing environment to provide a security service to a customer platform;exposing an application programming interface to the customer platform to provide on-demand access to the security service provided by the network security software component;receiving an application programming interface call from the customer platform, wherein the application programming interface call identifies an asset associated with the customer platform for protection by the security service and a selection of the security service to protect the asset; andin response to receiving the application programming interface call, providing the security service to the customer platform.