Cloud Virtual Range Allocation Through Visual IaaS Configuration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cyber range deployment in cloud environments is prone to misconfigurations and errors due to explicit and error-prone manual code writing, leading to inefficiencies and potential harm to the cloud environment.
Innovation Solution
A graphical user interface (GUI) is used to visually represent and implicitly define relationships between cloud entities, generating deployment instructions that are executed through an infrastructure as a service (IaaS) API, reducing the need for manual code and minimizing human error.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If manual code writing is used to deploy cyber ranges, then deployment flexibility can be achieved, but misconfigurations and errors increase
Solution Approach 1:
The patent introduces a visual configuration interface as an intermediary between the user and the cloud infrastructure. This interface generates deployment manifests automatically, eliminating direct manual code writing while maintaining user control and flexibility. The intermediary translates visual selections into proper infrastructure configurations, reducing errors while preserving deployment flexibility.
Solution Approach 2:
The system enables self-service deployment by automatically generating deployment manifests from visual configurations. The platform autonomously handles the translation of user-friendly visual selections into technical deployment instructions, reducing reliance on manual coding while maintaining accuracy and flexibility.
2Object-affected harmful factors
If security constraints are increased to prevent harm in cloud environments, then safety is improved, but deployment time increases
Solution Approach 1:
The patent implements preliminary validation and containment measures within the visual configuration interface itself. Security constraints are built into the deployment manifest generation process, allowing the system to pre-validate configurations and enforce safety rules before actual deployment occurs. This eliminates the need for time-consuming post-deployment security checks while maintaining safety.
Solution Approach 2:
The system provides immediate feedback during the visual configuration process regarding security constraints and potential issues. This real-time feedback mechanism allows users to correct configurations before deployment, preventing harmful outcomes while maintaining efficient deployment timing through proactive rather than reactive security measures.
3Manufacturing precision
If explicit definitions are required for cloud entities, then precision can be achieved, but deployment complexity increases
Solution Approach 1:
The patent replaces the mechanical process of manual code writing and explicit entity definition with an automated visual configuration system. The interface automatically generates precise entity definitions and relationships based on user selections, eliminating the need for users to manually write complex deployment manifests while maintaining precision through automated validation and generation of proper infrastructure definitions.
Data Source
AI summary
A system and method generate a virtual range in a cloud computing infrastructure. The system is configured to receive a graphical user interface (GUI) input, the GUI input including a visual representation of an isolated virtual space, a visual representation of a subnet, and a visual representation of a cloud entity, each visual representation including a placement within the GUI; generate, based on the received GUI input an instruction set for an infrastructure as a service (IaaS) application programming interface (API) of a cloud computing infrastructure, the instruction set when executed configuring the cloud computing environment to initiate the isolated virtual space, the subnet, and the cloud entity; and electronically transmit the generated instruction set to the IaaS API of the cloud computing environment, wherein transmitting the generated instruction set to the IaaS API configures the IaaS API to execute the instruction set.