Compliant software component infrastructure deployment

Patent metadata

Field	Value
Publication number	US-10769281-B2
Application number	US-201715834154-A
Country	US
Kind code	B2
Filing date	Dec 7, 2017
Priority date	Dec 7, 2017
Publication date	Sep 8, 2020
Grant date	Sep 8, 2020

Abstract

A method and system for improving deployment of a compliance cloud software component is provided. The method includes receiving application compliance requirements associated with operational requirements associated with hardware and software components. Original configuration files associated with a current hardware and software configuration for each hardware and software component are received and modified and configuration files associated with a modified hardware and software configuration for the hardware and software components are generated. A risk assessment with respect to the application compliance requirements is executed and a specified cloud infrastructure stack is enabled. A software application comprising the specified cloud infrastructure stack is generated, deployed, and executed resulting in operation of the hardware and software components.

First claim

What is claimed is:

1. A compliance cloud software component deployment improvement method comprising:
receiving from hardware machine sources, by a processor of a compliance framework, application compliance requirements associated with operational requirements associated with hardware and software components, wherein said application compliance requirements comprise encryption keys and audit logs associated with implemented hardware and software controls for said hardware and software components;
receiving, by said processor from said hardware and software components, original configuration files associated with a current hardware and software configuration for each hardware and software component of said hardware and software components, wherein said original configuration files are generated based on measurements of said hardware and software components;
generating, by said processor based on said application compliance requirements with respect to said original configuration files, modified configuration files associated with a modified hardware and software configuration for each said hardware and software component;
executing, by said processor, a risk assessment with respect to said application compliance requirements, said risk assessment associated with applying said modified configuration files to each said hardware and software component;
evaluating, by said processor, a workload of each said hardware and software component at a specified point in time with respect to regulatory requirements;
enabling, by said processor based on results of said executing and said evaluating, a specified cloud infrastructure stack comprising a group of software components associated with executing said application compliance requirements within a specified operational risk threshold of said risk assessment;
generating, by said processor, a software application comprising said specified cloud infrastructure stack;
deploying, by said processor to said hardware and software components, said software application, data encryption software, and an external firewall;
executing, by said processor, said software application, said data encryption software, and said external firewall resulting in execution of decryption keys enabling operation of said hardware and software components;
executing, by said processor, a gap analysis with respect to said operation of said hardware and software components; and
enabling, by said processor based on results of said executing said gap analysis, said specified cloud infrastructure stack with respect to a specified level of compliance.

2. The method of claim 1 , wherein said specified cloud infrastructure stack comprises a modified cloud infrastructure stack associated with said hardware and software components, and wherein said executing said data encryption software, said external firewall, and said software application comprising said specified cloud infrastructure stack comprises:
applying said modified configuration files to each said hardware and software component; and
updating each said hardware and software component in accordance with said modified configuration files.

3. The method of claim 1 , wherein said specified cloud infrastructure stack comprises an original cloud infrastructure stack associated with said hardware and software components, and wherein said executing said data encryption software, said external firewall, and said software application comprising said specified cloud infrastructure stack comprises:
reconfiguring each said hardware and software component in accordance with said original configuration files.

4. The method of claim 1 , further comprising:
weighting, by said processor, said application compliance requirements such that specified critical requirements of said application compliance requirements are continuously executed within said software application.

5. The method of claim 1 , wherein said hardware machine sources comprise hardware devices generating system software selected from the group consisting of software/hardware system configuration files, hardware/software system log files, and software/hardware system data files.

6. The method of claim 1 , wherein said operational requirements are comprised by structured data files.

7. The method of claim 1 , wherein said operational requirements are comprised by unstructured data files.

8. The method of claim 1 , further comprising:
aligning, by said processor, a configuration of said software application with said application compliance requirements.

9. The method of claim 1 , wherein said compliance framework comprises a cloud environment.

10. The method of claim 1 , further comprising:
providing at least one support service for at least one of creating, integrating, hosting, maintaining, and deploying computer-readable code in the hardware device, said code being executed by the computer processor to implement: said receiving said application compliance requirements, said receiving said original configuration files, said generating said modified configuration files, said executing said risk assessment, said enabling, said generating said software application, and said executing said software application.

11. A computer program product, comprising a computer readable hardware storage device storing a computer readable program code, said computer readable program code comprising an algorithm that when executed by a processor of a compliance framework implements a compliance cloud software component deployment improvement method, said method comprising:
receiving from hardware machine sources, by said processor, application compliance requirements associated with operational requirements associated with hardware and software components, wherein said application compliance requirements comprise encryption keys and audit logs associated with implemented hardware and software controls for said hardware and software components;
receiving, by said processor from said hardware and software components, original configuration files associated with a current hardware and software configuration for each hardware and software component of said hardware and software components, wherein said original configuration files are generated based on measurements of said hardware and software components;
generating, by said processor based on said application compliance requirements with respect to said original configuration files, modified configuration files associated with a modified hardware and software configuration for each said hardware and software component;
executing, by said processor, a risk assessment with respect to said application compliance requirements, said risk assessment associated with applying said modified configuration files to each said hardware and software component;
evaluating, by said processor, a workload of each said hardware and software component at a specified point in time with respect to regulatory requirements;
enabling, by said processor based on results of said executing and said evaluating, a specified cloud infrastructure stack comprising a group of software components associated with executing said application compliance requirements within a specified operational risk threshold of said risk assessment;
generating, by said processor, a software application comprising said specified cloud infrastructure stack;
deploying, by said processor to said hardware and software components, said software application, data encryption software, and an external firewall;
executing, by said processor, said software application, said data encryption software, and said external firewall resulting in execution of decryption keys enabling operation of said h

Assignees

• IBM

Inventors

• Hinton Heather M
• Attaluri Prabhakar
• Mcguire Michael J

Classifications

• G06F8/60

  Software deployment · CPC title

• G06F21/577 Primary

  Assessing vulnerabilities and evaluating computer system security · CPC title

• G06F2221/033

  Test or assess software · CPC title