Canaudit Inc since 2004
Vice President, Security and Audit Services
Self Employed since 1998
IT Consultant
RTR Locations Jan 2002 - Jan 2004
The IT Department
Education:
California State University-Northridge 2005 - 2008
BS, Computer Science
Skills:
Security Network Security Penetration Testing Vulnerability Assessment Vulnerability Management Information Security Management Disaster Recovery Networking Linux System Administration Information Security Pci Dss It Audit Security Awareness Computer Security Cissp Business Continuity Application Security Unix Risk Assessment Windows Security Audits Iso 27001 Metasploit Web Application Security Firewalls
Languages:
English
Certifications:
Cissp (Isc)²
Us Patents
Monitoring Security Configurations Of Cloud-Based Services
- Charlotte NC, US Travis E. Hoyt - Indian Land SC, US Kevin W. Nibler - Dallas TX, US
International Classification:
H04L 29/06
Abstract:
A cloud-based service monitoring device includes a criteria database and an exceptions database. The criteria database includes predefined configuration criteria corresponding to approved operating parameters of each cloud-based service being monitored. The exceptions database includes predefined configuration exceptions such that, for a given instance, each configuration exception corresponds to a different instance-specific criteria than the associated configuration criteria for the cloud-based service. The monitoring device extracts configuration settings from instances of the cloud-based service and compares the settings to the configuration criteria of the cloud-based service. If a suspect setting is identified that does not satisfy the configuration criteria at the service level, the monitoring device compares the suspect setting to instance-specific criteria. If the setting does not satisfy both the configuration criteria and the instance-specific criteria, an alert message may be transmitted to an administrator's device.