METHOD AND SYSTEM TO DETECT DISCREPANCY IN INFRASTRUCTURE SECURITY CONFIGURATIONS FROM TRANSLATED SECURITY BEST PRACTICE CONFIGURATIONS IN HETEROGENEOUS ENVIRONMENTS

摘要

A method, system and/or an apparatus to detect discrepancy in infrastructure security configurations from translated security best practice configurations in heterogeneous environments is disclosed. A method of an infrastructure security server communicatively coupled with a set of heterogeneous infrastructures translates a set of security best practice configurations of the heterogeneous infrastructures and/or a set of common vulnerabilities and exposures (CVE) of the heterogeneous infrastructures to programmatic execution. The method monitors the infrastructure security configurations associated with the heterogeneous infrastructures using a processor and a memory. The method analyzes the infrastructure security configurations based on the translated security best practice configurations and/or the translated common vulnerabilities and exposures (CVE). The method detects any discrepancy of the infrastructure security configurations from the translated security best practice configurations, and/or any translated CVE. The method alerts a set of devices and a user through one communication channel about any discrepancy.