Assessing a computing resource for compliance with a computing resource policy regime specification

• US 9,935,891 B1
• Filed: 09/30/2014
• Issued: 04/03/2018
• Est. Priority Date: 04/11/2012
• Status: Active Grant

• Current Assignee: Artemis Internet Inc.
• Original Assignee: Artemis Internet Inc.
• Inventors: Stamos, Alexander Charles
• Primary Examiner(s): Barry, Lance L
• Application Number:
  US14/503,365
• Time in Patent Office: 1,281 Days
• Field of Search: 709224, 709709
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 43/08 Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
• CPC Class Codes: H04L 43/10 Active monitoring, e.g. heartbeat, ping or trace-route
• CPC Class Codes: H04L 43/50 Testing arrangements
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 61/302 Administrative registration, e.g. for domain names at internet corporation for assigned names and numbers [ICANN]
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A computing resource policy specification (CRPRS) applies to a set of computing resources that share at least a portion of a first domain. The CRPRS comprises a plurality of rules describing a set of requirements with which a given computing resource in the set must comply. A determination is made, based at least in part on information received from a job scheduler, that an assessment of a particular computing resource for compliance with a first subset of rules included in the CRPRS should be initiated at a first time. A different subset of rules for compliance assessment is selected at a different time. A pre-scan associated with the particular computing resource is performed to assess functionality provided by the particular computing resource. A test set, of a subset of the tests associated with the assessment, is selected, and an assessment that uses the test set is dispatched and results of the assessment are delivered.

Claims

1. A system, comprising:

a processor configured to;

determine, based at least in part on information received from a job scheduler, that an assessment of a first computing resource for compliance with a first subset of rules included in a computing resource policy regime specification (CRPRS) should be initiated at a first time, wherein the job scheduler is configured to select a different subset of rules included in the CRPRS for a compliance assessment of the first computing resource at a different time, wherein the CRPRS is associated with a set of computing resources sharing at least a portion of a first domain, wherein the first computing resource is included in the set of computing resources sharing the at least a portion of the first domain name, wherein the CRPRS is applicable to the set of computing resources sharing at least a portion of the first domain name, and wherein the CRPRS comprises a plurality of rules describing a set of requirements with which a given computing resource belonging to the set must comply;

initiate a pre-scan associated with the first computing resource, wherein the pre-scan is configured to assess functionality provided by the first computing resource;

select as a test set, based at least in part on pre-scan results, a subset of possible tests associated with the assessment;

dispatch the assessment of the first computing resource, using the test set; and

deliver results of the assessment; and

a memory coupled to the processor and configured to provide the processor with instructions.

2. The system of claim 1 wherein the assessment is dispatched based at least in part on a determination being made by a timer that the assessment should be dispatched.

3. The system of claim 1 wherein dispatching the assessment includes performing a deduplicating action on the test set.

4. The system of claim 1 wherein delivering the results includes weighting the results.

5. The system of claim 4 wherein dispatching the assessment includes initiating a plurality of third party scans and wherein weighting the results includes weighting the third party scan results.

6. The system of claim 1 wherein dispatching the assessment includes requesting a plurality of scans from a plurality of third party external scanners.

7. The system of claim 1 wherein delivering the results of the assessment includes delivering the results to an auditor in an auditor interface.

8. The system of claim 7 wherein the auditor interface includes results from a plurality of computing resources.

9. The system of claim 8 wherein the auditor interface includes results from a plurality of customers of the system.

10. The system of claim 1 wherein the processor is further configured to receive permission from an administrator associated with the computing resource to make available at least a portion of the results to a third party.

11. The system of claim 1 wherein delivering the results of the assessment includes making a publicly available scorecard that summarizes the results.

12. The system of claim 1 wherein the processor is further configured to queue, for operator review, a violation of the computing resource policy regime specification detected during the assessment.

13. The system of claim 1 wherein delivering the results of the assessment includes alerting an administrator associated with the computing resource of a violation of the computing resource policy regime specification.

14. The system of claim 1 wherein at least one test included in the test set is a custom test authored on behalf of an owner of the computing resource.

15. A method, comprising:

determining, based at least in part on information received from a job scheduler, that an assessment of a first computing resource for compliance with a first subset of rules included in a computing resource policy regime specification (CRPRS) should be initiated at a first time, wherein the job scheduler is configured to select a different subset of rules included in the CRPRS for a compliance assessment of the first computing resource at a different time, wherein the CRPRS is associated with a set of computing resources sharing at least a portion of a first domain, wherein the first computing resource is included in the set of computing resources sharing the at least a portion of the first domain name, wherein the CRPRS is applicable to the set of computing resources sharing at least a portion of the first domain name, and wherein the CRPRS comprises a plurality of rules describing a set of requirements with which a given computing resource belonging to the set must comply;

initiating a pre-scan associated with the first computing resource, wherein the pre-scan is configured to assess functionality provided by the first computing resource;

selecting as a test set, based at least in part on pre-scan results, a subset of possible tests associated with the assessment;

dispatching the assessment of the first computing resource, using the test set; and

delivering results of the assessment.

16. The method of claim 15 wherein delivering the results includes weighting the results.

17. The method of claim 16 wherein dispatching the assessment includes initiating a plurality of third party scans and wherein weighting the results includes weighting the third party scan results.

18. The method of claim 15 wherein delivering the results of the assessment includes delivering the results to an auditor in an auditor interface.

19. The method of claim 15 wherein further comprising receiving permission from an administrator associated with the computing resource to make available at least a portion of the results to a third party.

20. A computer program product embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

determining, based at least in part on information received from a job scheduler, that an assessment of a first computing resource for compliance with a first subset of rules included in a computing resource policy regime specification (CRPRS) should be initiated at a first time, wherein the job scheduler is configured to select a different subset of rules included in the CRPRS for a compliance assessment of the first computing resource at a different time, wherein the CRPRS is associated with a set of computing resources sharing at least a portion of a first domain, wherein the first computing resource is included in the set of computing resources sharing the at least a portion of the first domain name, wherein the CRPRS is applicable to the set of computing resources sharing at least a portion of the first domain name, and wherein the CRPRS comprises a plurality of rules describing a set of requirements with which a given computing resource belonging to the set must comply;

initiating a pre-scan associated with the first computing resource, wherein the pre-scan is configured to assess functionality provided by the first computing resource;

selecting as a test set, based at least in part on pre-scan results, a subset of possible tests associated with the assessment;

dispatching the assessment of the first computing resource, using the test set; and

delivering results of the assessment.