IP Library › Granted Patent US 11,334,672

Granted Patent B2

US 11,334,672 · App. 16/691,804 · Granted May 17, 2022

Cluster security based on virtual machine content

Inventor: Shailaja Mallya (Bangalore, IN)

Assignee: International Business Machines Corporation

G06F21/577 G06F21/6218

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 11,334,672
App. No.: 16/691,804
Granted: May 17, 2022
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

A cluster is scanned. The cluster includes one or more virtual machines. A first content file change is detected based on the scan of the cluster. The first content file change is to a first content file. The first content file is located on a first virtual machine related to the cluster. A content-based security level of the cluster is determined based on the detection of the first content file change. The determined content-based security level of the cluster is compared to a security level standard of the cluster. A security gap is identified based on the comparison of the determined content-based security level to the security level standard of the cluster. In response to the identification of the security gap, an update to the security settings of the cluster is performed.

Claims (57)

1. A method comprising:

scanning, by a first computer system, a cluster of one or more virtual machines;

detecting, based on the scanning of the cluster, a first content file change,

wherein the first content file change is to a first content file located on a first virtual machine related to the cluster,

wherein the detecting includes performing natural language processing on the first content file,

wherein the natural language processing includes identifying of an industry sector that is related to the first content file change;

determining, based on the detecting of the first content file change and based on the natural language processing and based on the industry sector, a content-based security level of the cluster;

comparing the determined content-based security level of the cluster to a security level standard of the cluster;

identifying, based on the comparing of the determined content-based security level to the security level standard, a security gap; and

performing, in response to the identified security gap, an update to a security setting of the cluster.

2. The method of claim 1 :

wherein the cluster includes a second virtual machine,

and wherein the method further comprises:

scanning a second content file located on a second virtual machine;

and wherein the determining of the content-based security level of the cluster is further in response to the scanning of the second content file.

3. The method of claim 1 , wherein the performing of the update to the security setting of the cluster includes updating a security setting of the first virtual machine.

4. The method of claim 1 , wherein the performing the update to the security setting of the cluster includes updating a security setting of a virtual machine of the cluster other than the first virtual machine.

5. The method of claim 1 , wherein the scanning of the cluster includes monitoring for a given virtual machine to be added to the cluster, and wherein the first virtual machine is added to the cluster.

6. The method of claim 1 , wherein the first content file change is a creation of the first content file.

7. The method of claim 1 , wherein the first content file change is an update to the first content file.

8. The method of claim 1 , wherein the first content file change is a deletion of the first content file.

9. The method of claim 1 , wherein the first content file change is changing a sharing permission of the first content file.

10. The method of claim 1 , wherein the scanning of the cluster includes monitoring for a given virtual machine to be removed from the cluster, and wherein the first virtual machine is removed from the cluster.

11. The system of claim 1 , wherein the scan the cluster includes monitoring for a given virtual machine to be added to the cluster, and wherein the first virtual machine is added to the cluster.

12. A system, the system comprising:

a memory, the memory containing one or more instructions; and

a processor, the processor communicatively coupled to the memory, the processor, in response to reading the one or more instructions, configured to:

scan a cluster of one or more virtual machines;

detect, based on the scan the cluster, a first content file change,

wherein the first content file change is to a first content file located on a first virtual machine related to the cluster,

wherein the detecting includes performing natural language processing on the first content file,

wherein the natural language processing includes identifying of an industry sector that is related to the first content file change;

determine, based on detect the first content file change and based on the natural language processing and based on the industry sector, a content-based security level of the cluster;

compare the determined content-based security level of the cluster to a security level standard of the cluster;

identify, based on the compare the determined content-based security level to the security level standard, a security gap; and

perform, in response to the identified security gap, an update to a security setting of the cluster.

13. The system of claim 12 :

wherein the cluster includes a second virtual machine,

and wherein the processor is further configured to:

scan a second content file located on a second virtual machine;

and wherein the determine the content-based security level of the cluster is further in response to the scan the second content file.

14. The system of claim 12 , wherein the perform the update to the security setting of the cluster includes updating a security setting of the first virtual machine.

15. The system of claim 12 , wherein the perform the update to the security setting of the cluster includes updating a security setting of a virtual machine of the cluster other than the first virtual machine.

16. A computer program product, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions configured to:

scan, by a first computer system, a cluster of one or more virtual machines;