Cyber Security Service Integration in Disaster Recovery Cloud Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conducting cybersecurity tests on actual computing systems by simulating attacks poses a risk to the systems, as it exposes them to potential vulnerabilities and threats.
Innovation Solution
Integrating a cybersecurity service into existing disaster recovery solutions to assess vulnerabilities in system images backed up on these solutions, using a cloud-based platform that includes a cyber security service, API, data repository, and replicated image environment to perform tests and generate security certificates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cybersecurity tests are conducted on actual computing systems by simulating attacks, then security vulnerabilities can be identified and system security can be improved, but the systems are exposed to potential risks and harmful factors
Solution Approach 1:
The patent creates a replicated image environment that is a copy of the production computing system. This copy is used to perform cybersecurity tests instead of the actual production system. The replicated image includes replicated applications, data, and system configurations, allowing attack simulation without exposing real systems to harm.
Solution Approach 2:
The patent segments the testing function from the production system by creating a separate replicated image environment. This segmentation allows cybersecurity testing to be performed in isolation, preventing harmful factors from affecting the actual production system while still enabling comprehensive security assessment.
2Difficulty of detecting and measuring
If cybersecurity tests are performed on production systems, then real-time security assessment is achieved, but system stability and operational continuity are compromised
Solution Approach 1:
The patent uses a replicated image environment that mirrors the production system's structure, applications, and data. This copy enables security vulnerability detection to be performed on a duplicate rather than the actual system, maintaining production stability and operational continuity while achieving comprehensive security assessment capabilities.
3Productivity
If cybersecurity testing infrastructure is integrated into disaster recovery solutions, then resource utilization is improved, but system complexity increases
Solution Approach 1:
The patent integrates cybersecurity testing capabilities into the existing disaster recovery replicated image environment. The same infrastructure used for disaster recovery purposes is also utilized for security testing, achieving multi-functionality. This integration improves resource utilization by eliminating redundant infrastructure while managing complexity through shared components and unified management.
Data Source
AI summary
A method and system for implementing cyber security as a service in a cloud computing environment. Specifically, method and system entail leveraging existing disaster recovery (DR) solutions to perform cyber security tests and assess cyber security vulnerabilities, if any, on system and/or application images backed up on the existing DR solution. In leveraging existing DR solutions, a cyber security service is integrated into the existing DR solution as an additional feature.