METHOD AND SYSTEM FOR EFFICIENT MANAGEMENT OF SECURITY THREATS IN A DISTRIBUTED COMPUTING ENVIRONMENT

摘要

A method and system for distributing security threat management of an instance of an application that is hosted from multiple geographic locations, according to one embodiment. The method and system include monitoring first operational characteristics of the instance of the application, and establishing an average for the first operational characteristics based at least partially on the first operational characteristics, according to one embodiment. The method and system include identifying a deviation from the average for the first operational characteristics that is more than a predetermined amount, according to one embodiment. The method and system include retrieving second operational characteristics for at least one other instance of the application and comparing the first operational characteristics to the second operational characteristics, according to one embodiment. The system and method include reporting an identification of a potential security threat, according to one embodiment.

主权项

1. A computing system implemented method for distributing security threat management of a first instance of an application that is hosted from multiple geographic locations, comprising:
monitoring, with a computing system, first operational characteristics of the first instance of the application,
wherein the first instance of the application is hosted by a first virtual asset in a first computing environment,wherein the first computing environment is disposed in a first geographic region,wherein the first operational characteristics include a quantity of communication traffic between the first instance of the application and one or more external computing systems; establishing an average for the first operational characteristics based at least partially on the first operational characteristics; identifying a first deviation from the average for the first operational characteristics that is more than a first predetermined amount; in response to identifying the first deviation from the average, retrieving second operational characteristics for at least one other instance of the application,
wherein the at least one other instance of the application is hosted by one or more second virtual assets in one or more second computing environments,wherein the one or more second computing environments are disposed in one or more second geographic regions that are different than the first geographic region; comparing the first operational characteristics to the second operational characteristics; and reporting an identification of a potential security threat if the first operational characteristics differ from the second operational characteristics by more than a second predetermined amount.