Abstract: Examples relate to detecting network anomalies. In one example, a computing device may: receive, from each of a plurality of packet capture devices of a private network, domain name system (DNS) query packets that were sent by a particular client computing device operating on the private network, each DNS query packet specifying i) a destination DNS server, ii) a query domain name, and iii) a source address that specifies the particular client computing device; provide at least one of the DNS query packets to a DNS traffic analyzer that is trained to identify DNS anomalies based on characteristics of the DNS query packets; receive anomaly output from the DNS traffic analyzer, the anomaly output indicating a DNS anomaly that was identified for the DNS query packets; and in response to receiving the anomaly output, provide a user device with data specifying the identified DNS anomaly.

Abstract: According to one example of the present invention, there is provided, a method of accessing a service. The method comprising: receiving, from a requesting user, a request for a number of accessing users to have access to the service, generating service access data associated with the service, providing, to the requesting user, the generated service access data for distribution to the accessing users, receiving, from an accessing user, service access data, determining, based in part on the received service access data, whether the service can be provided, and where it is so determined, providing the service to the accessing.

Abstract: Examples relate to detecting network anomalies. In one example, a computing device may: receive, from each of a plurality of packet capture devices of a private network, domain name system (DNS) query packets that were sent by a particular client computing device operating on the private network, each DNS query packet specifying i) a destination DNS server, ii) a query domain name, and iii) a source address that specifies the particular client computing device; provide at least one of the DNS query packets to a DNS traffic analyzer that is trained to identify DNS anomalies based on characteristics of the DNS query packets; receive anomaly output from the DNS traffic analyzer, the anomaly output indicating a DNS anomaly that was identified for the DNS query packets; and in response to receiving the anomaly output, provide a user device with data specifying the identified DNS anomaly.

Abstract: According to one example of the present invention, there is provided, a method of accessing a service. The method comprising: receiving, from a requesting user, a request for a number of accessing users to have access to the service, generating service access data associated with the service, providing, to the requesting user, the generated service access data for distribution to the accessing users, receiving, from an accessing user, service access data, determining, based in part on the received service access data, whether the service can be provided, and where it is so determined, providing the service to the accessing.

Abstract: A method of accessing a service includes receiving, from a requesting user, a request for a number of accessing users to have access to the service; generating service access data associated with the service; providing, to the requesting user, the generated service access data for distribution to the accessing users; receiving service access data from an accessing user; determining, based in part on the received service access data, whether the service can be provided; and where it is so determined, providing the service to the accessing user.

Abstract: Embodiments of the invention provide a method and an apparatus for automatic verification of a network access control construct for a network switch. In one method embodiment, the present invention accesses an actual network access control construct on a network switching device, the actual network access control construct for defining the device actually coupled with the network switching device. Additionally, a machine-readable map of the network is accessed, the map providing a pre-determined network access control construct defining the device which should be coupled with the network switching device. A validation is performed, wherein the validation verifies that the actual network access control construct on the network switching device correlates with the pre-determined network access control construct defined by the machine-readable map.

Abstract: According to one example of the present invention, there is provided, a method of accessing a service. The method comprising: receiving, from a requesting user, a request for a number of accessing users to have access to the service, generating service access data associated with the service, providing, to the requesting user, the generated service access data for distribution to the accessing users, receiving, from an accessing user, service access data, determining, based in part on the received service access data, whether the service can be provided, and where it is so determined, providing the service to the accessing.

Abstract: Examples disclosed herein relate to calculating a misconduct prediction value. Examples include calculating a misconduct prediction value for a remote computing service provider user account from payment data corresponding to a method of payment for consumption of resources of the service provider and utilization data quantifying consumption of a processing resource of the service provider by an application provided to the service provider in connection with the user account.

Abstract: The present invention provides a method and an apparatus for creating visual representations of farms that enables connecting farms securely. In one embodiment, a visual representation of a first farm and a visual representation of a second farm are created. A visual representation of a secure connection is created. The visual representation of the first farm is associated with a first end of the visual representation of the secure connection. The visual representation of the second farm is associated with the second end of the visual representation of the secure connection.

Abstract: Embodiments of the invention provide a method and an apparatus for automatic verification of a zone configuration of a plurality of network switches. In one method embodiment, the present invention accesses an actual network access control construct and an actual zone configuration for a plurality of network switching devices. Additionally, a machine-readable map of the network is accessed, the map providing a pre-determined network access control construct defining the device which should be coupled with the network switching device and a pre-determined zone configuration defining the switching devices which should be part of the zone. An automatic verification is performed, wherein the verification verifies that the actual network access control construct and the actual zone configuration of network switching devices correlates with the pre-determined network access control construct and zone configuration defined by the machine-readable map.

Abstract: The present invention provides a method and an apparatus for automatic creation of secure connections between segmented resource farms in a utility computing environment. According to one embodiment, farms are automatically created using visual representations of the farms as a specification. A shared subnet is created as the basis of a secure connection, visual representations of one or more farms are associated with the shared subnet to form the secure connection between the one or more farms.

Abstract: Embodiments of the invention provide a method and an apparatus for automatic verification of a zone configuration of a plurality of network switches. In one method embodiment, the present invention accesses an actual zone configuration comprising a plurality of network switching devices, the actual zone configuration for defining the switching devices which are actually part of the zone. Additionally, a machine-readable map of the network is accessed, the map providing a pre-determined zone configuration defining the switching devices which should be part of the zone. An automatic verification is performed, wherein the verification verifies that the actual zone configuration of network switching devices correlates with the pre-determined zone configuration defined by the machine-readable map.

Abstract: Embodiments of the invention provide a method and an apparatus for generating a security document for a farm in a utility computing environment. In one method embodiment, the present invention accesses a farm specification in a utility computing environment (UCE) repository. In addition, information related to each device in the farm is accessed. Information criticality types and attributes are then collected for the farm, the information criticality matrix comprising information criticality types and attributes for each the device in the farm. The information criticality types and attributes are then combined with an abstract of a security plan to provide a complete farm security document.

Abstract: Methods and systems for verifying that devices in a network are properly connected physically are described. A listing is received from a device in the network. The listing identifies other devices coupled to the device and also identifies which communication port of the device each of the other devices is coupled to. The listing is compared against reference information representing the design of the network. Discrepancies between the listing and the reference information are identified.

Abstract: Methods and systems for verifying that a virtual network is properly configured are described. Configuration information from devices in the virtual network is received. The configuration information is compared against reference information. The reference information represents the design of the virtual network. Discrepancies between the configuration of the devices and the design of the virtual network are identified.

Abstract: Embodiments of the invention provide a method and an apparatus for automatic verification of a network access control construct for a network switch. In one method embodiment, the present invention accesses an actual network access control construct on a network switching device, the actual network access control construct for defining the device actually coupled with the network switching device. Additionally, a machine-readable map of the network is accessed, the map providing a pre-determined network access control construct defining the device which should be coupled with the network switching device. A validation is performed, wherein the validation verifies that the actual network access control construct on the network switching device correlates with the pre-determined network access control construct defined by the machine-readable map.

Abstract: Methods and systems for verifying that devices in a network are properly connected physically are described. A listing is received from a device in the network. The listing identifies other devices coupled to the device and also identifies which communication port of the device each of the other devices is coupled to. The listing is compared against reference information representing the design of the network. Discrepancies between the listing and the reference information are identified.

Abstract: Methods and systems for verifying that a virtual network is properly configured are described. Configuration information from devices in the virtual network is received. The configuration information is compared against reference information. The reference information represents the design of the virtual network. Discrepancies between the configuration of the devices and the design of the virtual network are identified.