SYSTEMS AND METHODS FOR DYNAMIC NETWORK SECURITY CONTROL AND CONFIGURATION

摘要

A computer-implemented method according to one embodiment of the present disclosure includes identifying, by a computer system, an asset associated with a logical zone; detecting a change in an attribute of the asset; and in response to detecting the change in the attribute of the asset, modifying, by the computer system, a configuration setting for a firewall. Among other things, the embodiments of the present disclosure can perform dynamically configure and control security features in response to changes in the computing environment, including asset attribute changes, security events, operational events, user input and environmental changes. Embodiments of the present disclosure thereby help to quickly maintain or change the security posture of a system and maintain the level of compliance with set of predefined security benchmarks or codified best practices.

主权项

1. A method comprising:
monitoring a plurality of virtual machines in a virtualized infrastructure, wherein each virtual machine is associated with a respective plurality of attributes, and the plurality of virtual machines includes a first virtual machine; detecting, based on the monitoring, a modification associated with a first attribute of the first virtual machine; and in response to detecting the modification, changing a second attribute of the first virtual machine, wherein the second attribute identifies membership of the first virtual machine in at least one of a plurality of logical zones, and changing the second attribute changes membership of the first virtual machine from a first logical zone to a second logical zone.