Enhanced control-plane security for network-accessible services
    3.
    发明授权
    Enhanced control-plane security for network-accessible services 有权
    增强的网络可访问服务的控制平面安全性

    公开(公告)号:US09270703B1

    公开(公告)日:2016-02-23

    申请号:US14060511

    申请日:2013-10-22

    CPC classification number: H04L63/20 H04L63/107

    Abstract: Methods and apparatus for enhancing control-plane security of a network-accessible service are described. In accordance with a security policy, one or more control servers are selected to perform administrative operations associated with configuration of a service instance at a particular instance host of a network-accessible service. The control servers may differ in security properties from the instance host. In response to a configuration request directed at the instance host, administrative operations are implemented at the selected control servers. A low-level command is issued for execution to the instance host from a control server. A result of the low-level command is obtained at the control server and is used to determine a response to the configuration request.

    Abstract translation: 描述了用于增强网络可访问服务的控制平面安全性的方法和装置。 根据安全策略,选择一个或多个控制服务器来执行与网络可访问服务的特定实例主机处的服务实例的配置相关联的管理操作。 控制服务器的安全属性可能与实例主机不同。 响应于针对实例主机的配置请求,在所选择的控制服务器上实现管理操作。 从控制服务器发出执行到实例主机的低级命令。 在控制服务器处获取低级命令的结果,并用于确定对配置请求的响应。

Patent Agency Ranking