Automated access control policy generation for computer resources

Abstract

Methods, systems, and media are shown for generating access control rules for computer resources involving collecting historical access data for user accesses to a computer resource and separating thehistorical access data into a training data set and a validation data set. An access control rule is generated for the computer resource based on the properties of the user accesses to the computer resource in the training data set. The rule is validated against the validation data set to determine whether the rule produces a denial rate level is below a threshold when the rule is applied to thevalidation data set. If the rule is valid, then it is provided to an administrative interface so that an administrator can select the rule for application to incoming user requests.

Description

Background technique [0001] In network security, using legitimate (vulnerable) files for malicious use or accessing files with sensitive information, malicious actors or attackers frequently attempt to infiltrate computer systems in order to access or damage files with sensitive information Or drop malicious files on the machine's file system. For example, financial or personal information may be obtained and sold or used to steal funds. Vital information of public and private entities can be stolen, corrupted or destroyed. [0002] To reduce the vulnerability (eg, attack surface) of computer resources, an organization's security officer or administrator can restrict access to a machine's computer resources, such as their file systems and services. However, existing solutions typically require manual configuration by an administrator for each computer resource and user pair. As a result, operators of large numbers of machines typically need to (1) understand what machines n...

AI Technical Summary

Problems solved by technology

In other cases, they don't have the resources because the task can take a lot of time due to the large size of the data

Images