Automated SaaS Platform Assessment With Suggested-Answer Forms
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
SaaS platforms pose security risks due to data commingling and inadequate encryption, and manual assessment processes increase network overhead.
Innovation Solution
An automated system using machine learning models generates dynamic forms with suggested answers and monitors for changes, reducing network overhead by minimizing communications between user and administrator devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual assessment processes are used to evaluate SaaS platforms, then security risks can be identified, but network overhead increases due to frequent communications between user and administrator devices
Solution Approach 1:
The system performs preliminary actions by generating a form with suggested answers using a machine learning model before the actual assessment communication. This pre-populated form reduces the need for back-and-forth communications between user and administrator devices, thereby identifying security risks while minimizing network overhead.
2Loss of energy
If dynamic forms with suggested answers are generated using machine learning, then network overhead is reduced, but system complexity increases
Solution Approach 1:
The patent introduces an intermediary machine learning model that acts as a mediator between the assessment system and the user. This model generates suggested answers automatically, reducing the communication burden while centralizing the complexity in a dedicated component rather than distributing it across the entire system.
3Reliability
If monitoring is performed to detect changes in SaaS platform configuration, then security risks are continuously assessed, but additional network communications are required
Solution Approach 1:
The system implements self-service monitoring where the assessment model automatically detects changes in SaaS platform configuration and triggers reassessment only when necessary. This eliminates the need for continuous periodic communications, allowing continuous security assessment while minimizing network communications by acting only on detected changes.
Data Source
AI summary
In some implementations, a user device may transmit, to an assessment system, a request to onboard a software-as-a-service (SaaS) platform. The user device may receive, from the assessment system, a set of responses to a set of questions associated with the SaaS platform. The user device may further receive, from the assessment system, a report including a set of risk scores. The set of risk scores may be calculated from the set of responses (e.g., by the assessment system). The user device may transmit a command to onboard the SaaS platform based on the set of risk scores.