Method and system for implementing a cloud native crowdsourced cyber security service
A method and system for implementing a cloud native crowdsourced cyber security service. Specifically, the disclosed method and system entail leveraging existing disaster recovery (DR) solutions to perform cyber security assessments on cloud native application images restored within isolated cloud-based testing sandboxes. In leveraging existing DR solutions, a crowdsourced cyber security service is integrated into the existing DR solution as an additional feature.
1. A method for crowdsourcing cyber security, comprising:
selecting an application granularity image (AGI);
data scrubbing the AGI to obtain an anonymous AGI;
restoring the anonymous AGI in a first restored image environment (RIE);
crowdsourcing an external cyber security assessment of the anonymous AGI; and
generating a hacker vulnerabilities assessment (HVA) in response to crowdsourcing the external cyber security assessment of the anonymous AGI.
2. The method of claim 1 , wherein the AGI is an image-based snapshot of a cloud native application (CNA) granularity, wherein the CNA granularity comprises one selected from a group consisting of a microservice portion, a complete microservice, and a set of collaborative microservices.
3. The method of claim 1 , wherein the first RIE is an isolated cloud computing testing sandbox, wherein restoring the anonymous AGI in the first RIE comprises allocating cloud environment computing resources to instantiate a set of virtual components to emulate the anonymous AGI.
4. The method of claim 3 , wherein the set of virtual components comprises at least one of a group consisting of a virtual machine and a container.
5. The method of claim 1 , further comprising:
prior to data scrubbing the AGI to obtain the anonymous AGI:
restoring the AGI in a second RIE;
selecting a set of known cyber security attacks from a cyber attack library (CAL);
applying the set of known cyber security attacks to the AGI restored within the second RIE; and
based on the applying, performing an internal cyber security assessment of the AGI to generate a service vulnerabilities assessment (SVA).
6. The method of claim 5 , further comprising:
after generating the HVA:
compensating a crowdsourcing contributor based on the HVA and the SVA.
7. The method of claim 6 , further comprising:
after compensating the crowdsourcing contributor:
generating a cyber protection report (CPR) based on the HVA and the SVA; and
providing the CPR to a developer computing system (DCS) from which the AGI originates.
8. A disaster recovery platform (DRP), comprising:
a computer processor;
a data repository operatively connected to the computer processor; and
a cyber security service (CSS) executing on the computer processor, and programmed to:
select an application granularity image (AGI) from the data repository;
data scrub the AGI to obtain an anonymous AGI;
instantiate a first restored image environment (RIE);
restore the anonymous AGI within the first RIE;
crowdsource an external cyber security assessment of the anonymous AGI; and
generate a hacker vulnerabilities assessment (HVA) in response to crowdsourcing the external cyber security assessment of the anonymous AGI.
9. The DRP of claim 8 , further comprising:
an application program interface (API) executing on the computer processor and operatively connected to the data repository and the CSS.
10. The DRP of claim 8 , further comprising:
a developer computing system (DCS) comprising another computer processor and operatively connected to the DRP,
wherein the AGI originates from the DCS.
11. The DRP of claim 8 , further comprising:
a hacker computing system (HCS) comprising another computer processor and operatively connected to the DRP,
wherein a HCS operator conducts the external cyber security assessment through crowdsourcing.
12. The DRP of claim 8 , wherein the CSS is further programmed to:
prior to data scrubbing the AGI to obtain the anonymous AGI:
instantiate a second RIE;
restore the AGI within the second RIE;
select a set of known cyber security attacks from the data repository;
apply the set of known cyber security attacks to the AGI restored within the second RIE; and
based on the applying, perform an internal cyber security assessment of the AGI.
13. The DRP of claim 12 , wherein the CSS comprises:
a data anonymizer executing on the computer processor and configured to generate the anonymous AGI through data scrubbing;
a crowdsourcing manager executing on the computer processor and configured to enlist and provide compensation for the external cyber security assessment;
a first RIE manager executing on the computer processor and configured to generate the HVA;
a second RIE manager executing on the computer processor and configured to generate a service vulnerabilities assessment (SVA) based on the internal cyber security assessment; and
a cyber security kernel (CSK) executing on the computer processor and configured to coordinate the data anonymizer, the crowdsourcing manager, the first RIE manager, and the second RIE manager.
14. A non-transitory computer readable medium (CRM) comprising computer readable program code, which when executed by a computer processor, enables the computer processor to:
select an application granularity image (AGI);
data scrub the AGI to obtain an anonymous AGI;
restore the anonymous AGI in a first restored image environment (RIE);
crowdsource an external cyber security assessment of the anonymous AGI; and
generate a hacker vulnerabilities assessment (HVA) in response to crowdsourcing the external cyber security assessment of the anonymous AGI.
15. The non-transitory CRM of claim 14 , wherein the AGI is an image-based snapshot of a cloud native application (CNA) granularity, wherein the CNA granularity comprises one selected from a group consisting of a microservice portion, a complete microservice, and a set of collaborative microservices.
16. The non-transitory CRM of claim 14 , wherein the first RIE is an isolated cloud computing testing sandbox, wherein restoring the anonymous AGI in the first RIE comprises allocating cloud environment computing resources to instantiate a set of virtual components to emulate the anonymous AGI.
17. The non-transitory CRM of claim 16 , wherein the set of virtual components comprises at least one of a group consisting of a virtual machine and a container.
18. The non-transitory CRM of claim 14 , further comprising computer readable program code, which when executed by the computer processor, enables the computer processor to:
prior to data scrubbing the AGI to obtain the anonymous AGI:
restore the AGI in a second RIE;
select a set of known cyber security attacks from a cyber attack library (CAL);
apply the set of known cyber security attacks to the AGI restored within the second RIE; and
based on the applying, perform an internal cyber security assessment of the AGI to generate a service vulnerabilities assessment (SVA).
19. The non-transitory CRM of claim 18 , further comprising computer readable program code, which when executed by the computer processor, enables the computer processor to:
after generating the HVA:
compensate a crowdsourcing contributor based on the HVA and the SVA.
20. The non-transitory CRM of claim 19 , further comprising computer readable program code, which when executed by the computer processor, enables the computer processor to:
after compensating the crowdsourcing contributor:
generate a cyber protection report (CPR) based on the HVA and the SVA; and
provide the CPR to a developer computing system (DCS) from which the AGI originates.