Onboarding access to remote security control tools
Disclosed below are representative embodiments of methods, apparatus, and systems for managing one or more cybersecurity tools that are deployed to help protect electronic assets in an IT infrastructure—including, for example, one or more security configuration management tools, vulnerability management tools, event logging tools, or other IT infrastructure security or monitoring tools that are used to monitor, secure, and/or control assets in an IT infrastructure. In one example, a request to install local software for access to a remote security control service is received from a remote user at a remote device; and data for installing the local software is transmitted to the remote user. In certain implementations, the data for installing the local software further includes a public cryptographic certificate.
1. A method of operating a multi-party, remote security configuration management service, comprising:
receiving, from a remote user at a remote device, a request to install local software for access to a remote security control service, the remote security control service including periodic integrity checks that compare current states of files stored on the remote device against baseline states of the files in order to detect changes; and
transmitting, to the remote user, data for installing the local software.
2. The method of claim 1 , wherein the data for installing the local software further includes a public cryptographic certificate.
3. The method of claim 1 , wherein a first server provides the data for installing the local software, and wherein the remote security control service is provided by a second server separate from the first server.
4. The method of claim 3 , further comprising:
receiving, from the second server, a request to authorize the security control service for the remote device.
5. The method of claim 4 , wherein the request to authorize the security control service for the remote device includes a transport layer security (“TLS”) certificate request validatable by a third-party-TLS service, and wherein the method further comprises transmitting the TLS certificate to the third-party-TLS service.
6. The method of claim 5 , further comprising receiving data from the third-party-TLS service that the TLS certificate request is validated, including a signed TLS certificate.
7. The method of claim 6 , further comprising transmitting an approval message to the second server, the approval message including the signed TLS certificate and identification information for the remote device.
8. One or more computer-readable storage devices storing computer-executable instructions which when executed by a computer cause the computer to perform a method, the method comprising:
receiving, from a remote user at a remote device, a request to install local software for access to a remote security control service, the remote security control service including periodic integrity checks that compare current states of files stored on the remote device against baseline states of the files in order to detect changes; and
transmitting, to the remote user, data for installing the local software.
9. The one or more computer-readable storage devices of claim 8 , wherein the data for installing the local software further includes a public cryptographic certificate.
10. The one or more computer-readable storage devices of claim 8 , wherein a first server provides the data for installing the local software, and wherein the remote security control service is provided by a second server separate from the first server.
11. The one or more computer-readable storage devices of claim 10 , further comprising:
receiving, from the second server, a request to authorize the security control service for the remote device.
12. The one or more computer-readable storage devices of claim 11 ,
wherein the request to authorize the security control service for the remote device includes a transport layer security (“TLS”) certificate request validatable by a third-party-TLS service, and wherein the method further comprises transmitting the TLS certificate to the third-party-TLS service.
13. The one or more computer-readable storage devices of claim 12 , wherein the method further comprises receiving data from the third-party-TLS service that the TLS certificate request is validated, including a signed TLS certificate.
14. The one or more computer-readable storage devices of claim 13 , further comprising transmitting an approval message to the second server, the approval message including the signed TLS certificate and identification information for the remote device.
15. A system, comprising:
a first server configured to provide onboarding services for remote security control services provided by a second server separate from the first server,
the first server comprising a processor and one or more computer-readable storage devices, the one or more computer-readable storage devices storing computer-executable instructions which when executed cause the first server to perform a method, the method comprising:
receiving, from a remote user at a remote device, a request to install local software for access to the remote security control services, the remote security control services including periodic integrity checks that compare current states of files stored on the remote device against baseline states of the files in order to detect changes; and
transmitting, to the remote user, data for installing the local software.
16. The system of claim 15 , wherein the method further comprises receiving, from the second server, a request to authorize the security control service for the remote device.
17. The system of claim 16 , wherein the request to authorize the security control service for the remote device includes a transport layer security (“TLS”) certificate request validatable by a third-party-TLS service, and wherein the method further comprises transmitting the TLS certificate to the third-party-TLS service.
18. The system of claim 17 , wherein the method further comprises receiving data from the third-party-TLS service that the TLS certificate request is validated, including a signed TLS certificate.
19. The system of claim 18 , wherein the method further comprising transmitting an approval message to the second server, the approval message including the signed TLS certificate and identification information for the remote device.