Security evaluation for computing workload relocation
A security incident is detected at a first location; a risk of the security incident is evaluated. A first security scores is generated for the first location. A set of security scores are generated for a set of alternative locations; the set of security scores excludes the first security score. A second security score within the set of security scores is determined to be the best security score among a plurality of security scores; the plurality of security scores comprises the set of security scores and the first security score. A workload associated with the first location is migrated to a second location, where the second location is associated with the second security score.
1. A computer-implemented method for workload relocation based on security evaluation, the method comprising:
detecting a security incident at a first location;
evaluating a risk of the security incident;
generating, for the first location, a first security score;
generating, for a set of alternative locations, a set of security scores excluding the first security score;
determining a second security score within the set of security scores is a best security score among a plurality of security scores, the plurality of security scores comprising the set of security scores and the first security score; and
migrating a workload associated with the first location to a second location, wherein the second location is associated with the second security score.
2. The method of claim 1 , wherein evaluating the risk of the security incident comprises:
generating a first risk score for the security incident;
ranking the first risk score among a set of risk scores associated with a set of security incidents; and
determining the first risk score represents the greatest security risk.
3. The method of claim 2 , wherein generating the first security score comprises:
collecting a set of Common Vulnerability Exposure (CVE) data associated with the first location;
comparing the set of CVE data to a set of asset data; and
generating, based on the comparison, the first security score.
4. The method of claim 3 , wherein generating the set of security scores comprises:
collecting, for each location within the set of alternative locations, a set of CVE data;
comparing, for each location within the set of alternative locations, the set of CVE data to the set of asset data; and
generating, based on the comparison, the set of security scores.
5. The method of claim 4 , further comprising:
compiling a migration security log;
auditing the migration security log;
determining the migration security log meets a set of security criteria; and
notifying a user of the migration security log and the workload migration.
6. The method of claim 4 , further comprising:
compiling a migration security log;
auditing the migration security log;
determining the migration security log fails a set of security criteria;
canceling the workload migration; and
notifying a user of the migration security log and the canceled workload migration.
7. The method of claim 5 , wherein generating the first risk score for the security incident includes a perceived impact of the security incident.
8. The method of claim 7 , wherein the perceived impact is determined using a neural network.
9. The method of claim 8 , wherein generating the perceived impact includes adjusting a weight and a bias of one or more neural network edges.
10. The method of claim 9 , wherein the method enables unilaterally provisioning computing capabilities in a cloud environment.
11. A system for workload relocation based on security evaluation, comprising:
a memory with program instructions included thereon; and
a processor in communication with the memory, wherein the program instructions cause the processor to:
detect a security incident at a first location;
evaluate a risk of the security incident;
generate, for the first location, a first security score;
generate, for a set of alternative locations, a set of security scores excluding the first security score;
determine a second security score within the set of security scores is a best security score among a plurality of security scores, the plurality of security scores comprising the set of security scores and the first security score; and
migrate a workload associated with the first location to a second location, wherein the second location is associated with the second security score.
12. The system of claim 11 , wherein evaluating the risk of the security incident comprises:
generating a first risk score for the security incident;
ranking the first risk score among a set of risk scores associated with a set of security incidents; and
determining the first risk score represents the greatest security risk.
13. The system of claim 12 , wherein generating the first security score comprises:
collecting a set of Common Vulnerability Exposure (CVE) data associated with the first location;
comparing the set of CVE data to a set of asset data; and
generating, based on the comparison, the first security score.
14. The system of claim 13 , wherein generating the set of security scores comprises:
collecting, for each location within the set of alternative locations, a set of CVE data;
comparing, for each location within the set of alternative locations, the set of CVE data to the set of asset data; and
generating, based on the comparison, the set of security scores.
15. The system of claim 13 , wherein the program instructions further cause the processor to:
compile a migration security log;
audit the migration security log;
determine the migration security log meets a set of security criteria; and
notify a user of the migration security log and the workload migration.
16. A computer program product for workload relocation based on security evaluation, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a device to cause the device to:
detect a security incident at a first location;
evaluate a risk of the security incident;
generate, for the first location, a first security score;
generate, for a set of alternative locations, a set of security scores excluding the first security score;
determine a second security score within the set of security scores is a best security score among a plurality of security scores, the plurality of security scores comprising the set of security scores and the first security score; and
migrate a workload associated with the first location to a second location, wherein the second location is associated with the second security score.
17. The computer program product of claim 16 , wherein evaluating the risk of the security incident comprises:
generating a first risk score for the security incident;
ranking the first risk score among a set of risk scores associated with a set of security incidents; and
determining the first risk score represents the greatest security risk.
18. The computer program product of claim 17 , wherein generating the first security score comprises:
collecting a set of Common Vulnerability Exposure (CVE) data associated with the first location;
comparing the set of CVE data to a set of asset data; and
generating, based on the comparison, the first security score.
19. The computer program product of claim 18 , wherein generating the set of security scores comprises:
collecting, for each location within the set of alternative locations, a set of CVE data;
comparing, for each location within the set of alternative locations, the set of CVE data to the set of asset data; and
generating, based on the comparison, the set of security scores.
20. The computer program product of claim 18 , wherein the program instructions further cause the device to:
compile a migration security log;
audit the migration security log;
determine the migration security log meets a set of security criteria; and
notify a user of the migration security log and the workload migration.