IP Library Granted Patent US 11,411,814
Granted Patent B2
US 11,411,814 · App. 16/934,735 · Granted Aug 9, 2022

Network resource management devices methods and systems

Inventors: Brian Johnson (Alexandria, VA); Andrew Mann (Cedar Park, TX); Chris Deramus (Oak Hill, VA)
Assignee: Rapid7, Inc.
H04L41/0816H04L41/0893H04L41/12H04L41/5025H04L43/0817H04L41/5096H04L63/101
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,411,814
App. No.
16/934,735
Granted
Aug 9, 2022
Kind
B2
Abstract

A method of managing a configuration of a computer network system includes creating of an instance of a server by a user through an interface of a public cloud service. A management process detects the existence of the instance by regularly polling the cloud service for infrastructure data and analyzing the infrastructure data to determine that the newly created instance exists. The method also includes testing parameters of the server indicated in the infrastructure data, which parameters are fully determined by the request, against predefined one or more infrastructure policies, whereby the parameters are available and testable against the policies during the generating, but are tested after the request is enacted to create the instance without creating policy enforcement encumbrance on the user when the user creates the new instance of the server.

Claims (56)

1. A method comprising:

performing, by a computer system that implements a management process for resources in a cloud service:

detecting a virtual machine (VM) instance in the cloud service, wherein the VM instance is created by a user via a request to the cloud service, and the detection is made by polling the cloud service for infrastructure data including a list of VM instances in the cloud service;

receiving said infrastructure data;

analyzing said infrastructure data to determine that said VM instance exists; and

testing parameters of the VM instance indicated in the infrastructure data to check compliance of the VM instance against one or more infrastructure policies,

wherein said parameters are available and testable against said infrastructure policies at a time the VM instance is requested, but tested after the VM instance is created, so that said user creates said VM instance without checking for compliance.

2. The method of claim 1 , wherein

the cloud service includes a hybrid cloud.

3. The method of claim 1 , further comprising

repairing or terminating said VM instance responsive WA to a result of said testing.

4. The method of claim 1 , further comprising

permitting said VM instance to execute in the cloud service responsive WA to a result of said testing.

5. The method of claim 1 , further comprising

notifying the user in response to a determination that the VM instance violates the one or more infrastructure policies.

6. The method of claim 1 , wherein

the one or more infrastructure policies include a utilization policy.

7. The method of claim 1 , wherein

the one or more infrastructure policies include a security policy.

8. The method of claim 1 , wherein

the request to create the VM instance is sent to the cloud service from the management process.

9. The method of claim 1 , further comprising:

detecting, based on the polling, a change to a configuration of the VM instance; and

testing the parameters of the VM instance again to check for compliance of the VM instance against the one or more infrastructure policies.

10. A system comprising:

a computer system that implements a management process for resources in a cloud service, configured to:

detect virtual machine (VM) instance in the cloud service, wherein the VM instance is created by a user via a request to the cloud service, and the detection is made by polling the cloud service for infrastructure data including a list of VM instances in the cloud service;

receive said infrastructure data;

analyze said infrastructure data to determine that said VM instance exists; and

test parameters of the VM instance indicated in the infrastructure data to check compliance of the VM instance against one or more infrastructure policies, wherein said parameters are available and testable against said infrastructure policies at a time the VM instance is requested, but tested after the VM instance is created, so that said user creates said VM instance without checking for compliance.

11. The system of claim 10 , wherein

the cloud service includes a hybrid cloud.

12. The system of claim 10 , wherein

the computer system is configured to repair or terminate said VM instance responsive to a result of said testing.

13. The system of claim 10 , wherein

the computer system is configured to permit said VM instance to execute in the cloud service responsive to a result of said testing.

14. The system of claim 10 , wherein

the computer system is configured to notify the user in response to a determination that the VM instance violates the one or more infrastructure policies.

15. The system of claim 10 , wherein

the one or more infrastructure policies include a utilization policy.

16. The system of claim 10 , wherein

the one or more infrastructure policies include a security policy.

17. The system of claim 10 , wherein

the request to create the VM instance is sent to the cloud service from the management process.

18. The system of claim 10 , wherein the computer system is configured to:

detect, based on the polling, a change to a configuration of the VM instance; and

test the parameters of the VM instance again to check for compliance of the VM instance against the one or more infrastructure policies.

19. One or more non-transitory computer-readable media storing program instructions that when executed on one or more processors of a computer system implement a management process for resources in a cloud service and cause the computer system to:

detect a virtual machine (VM) instance in the cloud service, wherein the VM instance is created by a user via a request to the cloud service, and the detection is made by polling the cloud service for infrastructure data including a list of VM instances in the cloud service;

receive said infrastructure data;

analyze said infrastructure data to determine that said VM instance exists; and

test parameters of the VM instance indicated in the infrastructure data to check compliance of the VM instance against one or more infrastructure policies,

wherein said parameters are available and testable against said infrastructure policies at a time the VM instance is requested, but tested after the VM instance is created, so that said user creates said VM instance without checking for compliance.

20. The one or more non-transitory computer-readable media of claim 19 ,

wherein the program instructions when executed on the one or more processors cause the computer system to:

repair or terminate the VM instance responsive to a result of the testing.

Assignments (5)
SECURITY INTEREST Recorded Jun 26, 2025
From: RAPID7, INC.; RAPID7 LLC
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 071743/0537 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 23, 2024
From: DIVVY CLOUD CORPORATION
To: RAPID7, INC.
Reel/Frame 069016/0259 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 18, 2024
From: JOHNSON, BRIAN; DERAMUS, CHRIS; MANN, ANDREW
To: DIVVYCLOUD CORPORATION
Reel/Frame 068624/0218 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 9, 2020
From: JOHNSON, BRIAN; MANN, ANDREW; DERAMUS, CHRIS
To: DIVVYCLOUD CORPORATION
Reel/Frame 054015/0665 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 9, 2020
From: DIVVY CLOUD CORPORATION
To: RAPID7, INC.
Reel/Frame 054038/0298 →
Continuity (3)
Division 15005789 · Jan 25, 2016
Provisional Application 62107634 · Jan 26, 2015
Related Publication 20200351162A1 · Nov 5, 2020