Rolling security platform
A method of rolling security for a system that includes multiple server groups, such as a first server group of one or more servers and a second server group of one or more servers. The method includes repeatedly initiating rebuilding of the first server group of one or more servers. The method also includes repeatedly initiating rebuilding of the second server group of one or more servers. The rebuilding of the first server group of one or more servers is staggered in time from the rebuilding of the second server group of one or more servers. The servers may be physical servers or virtual machines. Rolling security may also be applied to software containers, computing devices within a data center, and computing devices outside of a datacenter.
1. A system for rolling security, comprising:
a first server group of servers;
a second server group of servers, each server in the first server group and second server group including software that includes an operating system and an application that supports user sessions; and
a non-transitory computer readable medium storing instructions, the instructions when executed by at least one processor cause the at least one processor to:
access rolling timing information indicating rebuild timings for the first server group and rebuild timings for the second server group, the rebuild timings for the first server group being staggered in time from the rebuild timings of the second server group;
periodically initiate rebuilding of the software of each server of the first server group of servers according to the rebuild timings for the first server group;
periodically initiate rebuilding of the software of each server in the second server group of servers according to the second rebuild timings for the first server group, the rebuilding of the first server group of servers staggered in time from the rebuilding of the second server group of servers;
in response to each periodic rebuilding the software of each server in the first server group, initiate a password change of each server in the first server group; and
in response to each periodic rebuilding the software of each server in the second server group, initiate a password change of each server in the second server group.
2. The system of claim 1 , wherein the instructions further cause the at least one processor to:
monitor durations of the user sessions; and
generate the rolling timing information indicating rebuild timings for the first server group and rebuild timings for the second server group based on the monitored durations of the user sessions.
3. A non-transitory computer readable medium storing instructions to implement rolling security for a system that includes a first server group of servers and a second server group of servers, the instructions when executed by at least one processor cause the at least one processor to:
repeatedly initiate rebuilding at least one of software and firmware of the first server group of servers;
repeatedly initiate rebuilding at least one of software and firmware of the second server group of servers, the rebuilding of the first server group of servers being staggered in time from the rebuilding of the second server group of servers; and
in response to each periodic rebuilding the software of each server in the first server group, initiate a password change of each server in the first server group; and
in response to each periodic rebuilding the software of each server in the second server group, initiate a password change of each server in the second server group.
4. The computer readable medium of claim 3 , wherein the instructions cause the at least one processor to:
access rolling timing information indicating first rebuild timings for rebuilding the first server group and second rebuild timings for rebuilding the second server group, the first rebuild timings staggered in time from the second rebuild timings; and
wherein the first server group and the second server group are repeatedly rebuilt according to the rolling timing information.
5. The computer readable medium of claim 4 , wherein each of the servers in the first server group and the second server group host an application that supports user sessions, and the instructions cause the at least one processor to:
monitor durations of the user sessions; and
generate the rolling timing information indicating rebuild timings for the first server group and the second server group based on the monitored durations of the user sessions.
6. The computer readable medium of claim 3 , wherein the servers in the first server group and the second server group that are repeatedly rebuilt are physical servers.
7. The computer readable medium of claim 3 , wherein the servers in the first server group and the second server group that are repeatedly rebuilt are virtual machines.
8. The computer readable medium of claim 3 , wherein the system further comprises one or more load balancers to balance network traffic between the first server group and the second server group, and the instructions cause the at least one processor to:
repeatedly initiate shutdown preparation mode of the first server group prior to each rebuilding of the first server group, the load balancers preventing new sessions from being established with applications of the first server group while the first server group is in shutdown preparation mode; and
repeatedly initiate shutdown preparation mode of the second server group prior to each rebuilding of the second server group, the load balancers preventing new sessions from being established with applications of the second server group while the second server group is in shutdown preparation mode.
9. The computer readable medium of claim 3 , wherein
the repeatedly initiating rebuilding of the first server group comprises periodically initiating rebuilding of the first server group; and
the repeatedly initiating rebuilding of the second server group comprises periodically initiating rebuilding of the second server group.
10. A computer implemented method of rolling security for a system that includes a first server group of servers and a second server group of servers, the method comprising:
repeatedly initiating rebuilding at least one of software and firmware of the first server group of one or more servers; and
repeatedly initiating rebuilding at least one of software and firmware of the second server group of one or more servers, the rebuilding of the first server group being staggered in time from the rebuilding of the second server group; and
in response to each periodic rebuilding the software of each server in the first server group, initiate a password change of each server in the first server group; and
in response to each periodic rebuilding the software of each server in the second server group, initiate a password change of each server in the second server group.
11. The method of claim 10 , further comprising:
accessing rolling timing information indicating rebuild timings for rebuilding the first server group and second server group; and
wherein the first server group and the second server group are repeatedly rebuilt according to the rolling timing information.
12. The method of claim 11 , wherein each of the servers in the first server group and the second server group host an application that supports user sessions, and the method further comprises:
monitoring durations of the user sessions; and
generating the rolling timing information indicating rebuild timings for the first server group and the second server group based on the monitored durations of the user sessions.