Homogenizing Tooling for a Heterogeneous Cloud Environment

• US 20160142411A1
• Filed: 08/06/2015
• Published: 05/19/2016
• Est. Priority Date: 11/19/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Alger, Joshua A., Hoy, Jeffrey R., Pellas, Barry J., Stecher, David M.
• Granted Patent: US 9,781,013 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/5041 characterised by the time relationship between creation and deployment of a service
• CPC Class Codes: H04L 47/785 among multiple network domains, e.g. multilateral agreements
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 67/1031 Controlling of the operation of servers by a load balancer, e.g. adding or removing servers that serve requests
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

A method, system and computer-usable medium are disclosed for controlling access to a node deployed in a cloud environment. A new node, based upon a common image, is created in a cloud computing environment. A unique set of randomized system parameters are then generated for the new node, which is then mapped to a set of generic system parameters. A request to access the new node is intercepted, which contains the generic system parameters. The intercepted access request is then parsed to extract the set of generic system parameters, which are then replaced with the unique set of randomized system parameters associated with the target node to generate a modified access request. The modified access request is then forwarded to the target node.

Claims

1. A computer-implemented method for controlling access in a cloud environment, comprising:

mapping a unique set of randomized system parameters to a set of generic system parameters;

receiving a request to access a resource in the cloud environment, the request including the set of generic system parameters;

intercepting the request and replacing the set of generic system parameters with the unique set of randomized system parameters to produce a modified request; and

forwarding the modified request for access to the resource.

2. The method of claim 1, further comprising:

selecting the randomized system parameters for a node of the cloud environment; and

deploying the node using the randomized system parameters.

3. The method of claim 1, further comprising:

intercepting a response from the resource containing at least a portion of the unique set of randomized system parameters; and

replacing the portion with a corresponding portion of the set of generic system parameters.

4. The method of claim 1, further comprising:

changing the unique set of randomized system parameters at the resource to a temporary set of system parameters for a duration of a user session.

5. The method of claim 1, further comprising:

resetting the unique set of randomized system parameters for a set of resources in the cloud environment.

6. The method of claim 5, wherein:

the unique set of randomized system parameters are reset for all resources in the cloud environment.