Abstract: In various embodiments, a forensic scoping application analyzes host instances in order to detect anomalies. The forensic scoping application acquires a snapshot for each host instance included in an instance group. Each snapshot represents a current operational state of the associated host instance. Subsequently, the forensic scoping application performs clustering operation(s) based on the snapshots to generate a set of clusters. The forensic scoping application determines that a first cluster in the set of clusters is associated with fewer host instances than at least a second cluster in the set of clusters. Based on the first cluster, the forensic scoping application determines that a first host instance included in the instance group is operating in an anomalous fashion. Advantageously, efficiently determining host instances that are operating in an anomalous fashion during a security attack can reduce the amount of damage caused by the security attack.

Abstract: In various embodiments, a forensic scoping application analyzes host instances in order to detect anomalies. The forensic scoping application acquires a snapshot for each host instance included in an instance group. Each snapshot represents a current operational state of the associated host instance. Subsequently, the forensic scoping application performs clustering operation(s) based on the snapshots to generate a set of clusters. The forensic scoping application determines that a first cluster in the set of clusters is associated with fewer host instances than at least a second cluster in the set of clusters. Based on the first cluster, the forensic scoping application determines that a first host instance included in the instance group is operating in an anomalous fashion. Advantageously, efficiently determining host instances that are operating in an anomalous fashion during a security attack can reduce the amount of damage caused by the security attack.

Abstract: A certificate orchestration system for digital certificate and encryption key management is provided herein along with associated methods. The system includes a certificate orchestration server having a processing device in communication with a coupled storage system that is coupled to the certificate orchestration server. The system further includes an interface provided by the certificate orchestration server to a client device; and a database to store digital certificates and keys. The certificate orchestration server is configured to receive a request from the client device to generate a public key, receive the public key from a third-party certificate authority system over an external network, store the public key in the coupled storage system. The coupled storage system is not directly connected to the client device.

Abstract: A certificate orchestration system for digital certificate and encryption key management is provided herein along with associated methods. The system includes a certificate orchestration server having a processing device in communication with a coupled storage system that is coupled to the certificate orchestration server. The system further includes an interface provided by the certificate orchestration server to a client device; and a database to store digital certificates and keys. The certificate orchestration server is configured to receive a request from the client device to generate a public key, receive the public key from a third-party certificate authority system over an external network, store the public key in the coupled storage system. The coupled storage system is not directly connected to the client device.

Abstract: A certificate orchestration system for digital certificate and encryption key management is provided herein along with associated methods. The system includes a certificate orchestration server having a processing device in communication with a coupled storage system that is coupled to the certificate orchestration server. The system further includes an interface provided by the certificate orchestration server to a client device; and a database to store digital certificates and keys. The certificate orchestration server is configured to receive a request from the client device to generate a digital certificate and an associated public key, receive the digital certificate and associated public key from a third-party certificate authority system over an external network, store the digital certificate and public key in the coupled storage system. The coupled storage system is not directly connected to the client device.

Abstract: Provided herein are systems and methods of managing permissions for applications deployed in a distributed computing infrastructure. An exemplary system includes an access management server having a processing device, a distributed computing infrastructure in communication with the management server having a plurality of resource instances and a request log, an administration system having a security application executing thereon. The security application has access policies associated with each of a plurality of applications. The processing device of the management server: receives application request information from the request log describing requests made by a first application being monitored by the access management server.

Abstract: Provided herein are systems and methods of managing permissions for applications deployed in a distributed computing infrastructure. An exemplary system includes an access management server having a processing device, a distributed computing infrastructure in communication with the management server having a plurality of resource instances and a request log, an administration system having a security application executing thereon. The security application has access policies associated with each of a plurality of applications. The processing device of the management server: receives application request information from the request log describing requests made by a first application being monitored by the access management server.

Abstract: A certificate orchestration system for digital certificate and encryption key management is provided herein along with associated methods. The system includes a certificate orchestration server having a processing device in communication with a coupled storage system that is coupled to the certificate orchestration server. The system further includes an interface provided by the certificate orchestration server to a client device; and a database to store digital certificates and keys. The certificate orchestration server is configured to receive a request from the client device to generate a digital certificate and an associated public key, receive the digital certificate and associated public key from a third-party certificate authority system over an external network, store the digital certificate and public key in the coupled storage system. The coupled storage system is not directly connected to the client device.