Patent Document ID: 9444787
Application ID: 14353053
Patent Status: 1

Claim One:
1. A non-intrusive method for automatically dispatching a plurality of security rules in a cloud environment, comprising: forming a composition application model of an application in the cloud environment, wherein said composition application model comprises various servers for deploying said application; generating a topology model of said various servers in the cloud environment; automatically generating a plurality of security rules to be adopted by a plurality of server-side firewalls for respective various servers based on an application context of the following: (i) said application, (ii) said composition application model, (iii) and said topology model; dispatching said plurality of security rules to each server-side firewall based on said composition application model and said topology model, and receiving feedback information about a plurality of either security rule violations or exceptions from the plurality of server-side firewalls; updating said plurality of security rules based on said feedback information; and dispatching a plurality of updated security rules to each server-side firewall; wherein the application context of said application is included in either file struts.xml or file web.xml and; wherein automatically generating the plurality of security rules to be adopted by the plurality of server-side firewalls for the respective various servers is based on a severity input.