Methods and Systems for Automated Network Scanning in Dynamic Virtualized Environments

摘要

Systems and methods for managing jobs to be scanned based on existence of processing nodes are described. One of the methods includes obtaining identification information regarding operation of a first set of the processing nodes from an inventory and creating a job for scanning the processing nodes of the first set for security vulnerability. The job includes the identification information. The method further includes verifying the inventory to determine the first identifying information of the first set of processing nodes for removal from the job and loading the job having second identifying information for a second set of processing nodes that remain after the verifying operation.

主权项

1. A method comprising:
loading a job into a vulnerability scanner node, the job including identification information regarding a number of nodes of a cloud network, the nodes in a non-terminated state at a time the job is loaded into the vulnerability scanner node; receiving a number of outcomes of a scan of the nodes from the vulnerability scanner node; determining whether a state of at least one of the nodes changed from being non-terminated to terminated based on a change in the identification information; and removing at least one of the outcomes associated with the at least one of the nodes in response to determining that the state of the at least one of the nodes changed from being non-terminated to terminated.