Perform edge processing by selecting edge devices based on security levels
Provided are techniques for performing edge processing by selecting edge devices based on security levels. A security policy is identified for a job to determine a security level for the data. A number of the edge devices that are to be included in a participating group to execute the job is identified. A subset of edge devices that meet the security level are identified by comparing security data of each of the edge devices with the security level. In response to determining that the subset of edge devices includes that number of edge devices, the edge devices from the subset are added to the participating group. The job is executed using the edge devices in the participating group and the one or more cloud nodes, while maintaining the security level in processing the data and in communications across the edge devices and the one or more cloud nodes.
1. A computer-implemented method, comprising operations for:
determining that a job that uses one or more cloud nodes and uses edge devices to process data from one or more data sources is to be executed, wherein each of the edge devices comprises security data;
identifying a security level for the job from a security policy stored at a cloud node of the one or more cloud nodes;
determining a desired number of the edge devices that are to be included in a participating group to execute the job;
comparing the security data of each of the edge devices with the security level of the security policy defined at the cloud node;
determining that a subset of the edge devices meet the security level based on the comparing;
adding the subset of the edge devices that meet the security level to the participating group;
determining that the participating group does not include the desired number of the edge devices;
installing a security update at one or more other edge devices that did not meet the security level to move the one or more other edge devices to the security level and to reach the desired number of the edge devices;
adding the one or more other edge devices to the participating group; and
executing the job using the participating group and the one or more cloud nodes.
2. The computer-implemented method of claim 1 , wherein installing the security update further comprises operations for:
sending the security update to one or more edge devices that are not in the participating group; and
receiving confirmation that the security update has been installed at the one or more edge devices.
3. The computer-implemented method of claim 2 , further comprising operations for:
in response to determining that the edge devices in the participating group have completed edge processing, uninstalling the security update from the one or more other edge devices.
4. The computer-implemented method of claim 1 , wherein the security level changes, and further comprising:
modifying the edge devices that are in the participating group.
5. The computer-implemented method of claim 1 , further comprising operations for:
classifying the data using a machine learning model; and
determining whether to send the data to a particular edge device in the participating group based on the classification of the data.
6. The computer-implemented method of claim 1 , wherein identifying the subset of the edge devices that meet the security level uses a machine learning model.
7. The computer-implemented method of claim 1 , wherein a Software as a Service (SaaS) is configured to perform the operations of the method.
8. A computer program product, the computer program product comprising a computer readable storage medium having program code embodied therewith, the program code executable by at least one processor to perform operations for:
determining that a job that uses one or more cloud nodes and uses edge devices to process data from one or more data sources is to be executed, wherein each of the edge devices comprises security data;
identifying a security level for the job from a security policy for the job stored at a cloud node of the one or more cloud nodes;
determining a desired number of the edge devices that are to be included in a participating group to execute the job;
comparing the security data of each of the edge devices with the security level of the security policy defined at the cloud node;
determining that a subset of the edge devices meet the security level based on the comparing;
adding the subset of the edge devices that meet the security level to the participating group;
determining that the participating group does not include the desired number of the edge devices;
installing a security update at one or more other edge devices that did not meet the security level to move the one or more other edge devices to the security level and to reach the desired number of the edge devices;
adding the one or more other edge devices to the participating group; and
executing the job using the participating group and the one or more cloud nodes.
9. The computer program product of claim 8 , wherein the program code for installing the security update is executable by the at least one processor to perform further operations for:
sending the security update to one or more edge devices that are not in the participating group; and
receiving confirmation that the security update has been installed at the one or more edge devices.
10. The computer program product of claim 8 , wherein the program code is executable by the at least one processor to perform operations for:
in response to determining that the edge devices in the participating group have completed edge processing, uninstalling the security update from the one or more other edge devices.
11. The computer program product of claim 8 , wherein the security level changes, and wherein the program code is executable by the at least one processor to perform operations for:
modifying the edge devices that are in the participating group.
12. The computer program product of claim 8 , wherein the program code is executable by the at least one processor to perform operations for:
classifying the data using a machine learning model; and
determining whether to send the data to a particular edge device in the participating group based on the classification of the data.
13. The computer program product of claim 8 , wherein identifying the subset of the edge devices that meet the security level uses a machine learning model.
14. The computer program product of claim 8 , wherein a Software as a Service (SaaS) is configured to perform the operations of the computer program product.
15. A computer system, comprising:
one or more processors, one or more computer-readable memories and one or more computer-readable, tangible storage devices; and
program instructions, stored on at least one of the one or more computer-readable, tangible storage devices for execution by at least one of the one or more processors via at least one of the one or more computer-readable memories, to perform operations comprising:
determining that a job that uses one or more cloud nodes and uses edge devices to process data from one or more data sources is to be executed, wherein each of the edge devices comprises security data;
identifying a security level for the job from a security policy stored at a cloud node of the one or more cloud nodes;
determining a desired number of the edge devices that are to be included in a participating group to execute the job;
comparing the security data of each of the edge devices with the security level of the security policy defined at the cloud node;
determining that a subset of the edge devices meet the security level based on the comparing;
adding the subset of the edge devices that meet the security level to the participating group;
determining that the participating group does not include the desired number of the edge devices;
installing a security update at one or more other edge devices that did not meet the security level to move the one or more other edge devices to the security level and to reach the desired number of the edge devices;
adding the one or more other edge devices to the participating group; and
executing the job using the participating group and the one or more cloud nodes.
16. The computer system of claim 15 , wherein the operations for installing the security update further comprise:
sending the security update to one or more edge devices that are not in the participating group; and
receiving confirmation that the security update has been installed at the one or more edge devices.
17. The computer system of claim 15 , wherein the operations further comprise:
in response to determining that the edge devices in the participating group have completed edge processing, uninstalling the security update from the one or more other edge devices.
18. The computer system of claim 15 , wherein the security level changes, and wherein the operations further comprise:
modifying the edge devices that are in the participating group.
19. The computer system of claim 15 , wherein the operations further comprise:
classifying the data using a machine learning model; and
determining whether to send the data to a particular edge device in the participating group based on the classification of the data.
20. The computer system of claim 15 , wherein a Software as a Service (SaaS) is configured to perform the operations of the computer system.