Browser Extension for Cloud Cybersecurity Risk Detection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Organizations face challenges in identifying and managing cybersecurity risks within dynamic cloud environments due to the complexity of asset interconnectivity and the invasive nature of existing risk mitigation technologies.

Innovation Solution

A system and method that utilize non-invasive scanning techniques to detect cloud entities in a web page, query a security database for cybersecurity risks, and render risk representations on a display, such as a security toolbar or webpage overlay, without requiring invasive measures like permanent agents or resource-intensive monitoring tools.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If invasive risk mitigation measures (permanent agents, resource-intensive monitoring tools) are deployed, then cybersecurity risk detection capability is improved, but infrastructure cost and operational complexity increase

Engineering Contradiction:

Improvecybersecurity risk detection capabilityVSAvoidinfrastructure complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a browser extension as an intermediary component that mediates between the user and the cloud environment. This extension captures security events from cloud service provider web pages and presents them through a unified security toolbar interface, eliminating the need for complex invasive monitoring tools while maintaining detection capability

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system creates a virtual copy of the cloud environment's security events through the browser extension, which captures and reproduces security-relevant information from cloud service provider interfaces. This copying approach allows security monitoring without direct invasive access to the actual cloud infrastructure

Inventive Principle:

Principle #26Copying

2Reliability

If invasive risk mitigation measures (permanent agents, monitoring tools) are deployed, then cybersecurity risk detection capability is improved, but financial cost increases

Engineering Contradiction:

Improvecybersecurity risk detection capabilityVSAvoidfinancial cost

Core Design Contradiction:

ReliabilityVSLoss of energy

Solution Approach 1:

The browser extension leverages the existing cloud service provider web pages and their built-in security event reporting capabilities. By self-serviceing the data collection through the providers' own interfaces, the system avoids costly dedicated monitoring infrastructure while maintaining detection effectiveness

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The browser extension serves multiple security functions through a single lightweight component: capturing security events, displaying alerts, providing security scoring, and offering remediation guidance. This multi-functionality eliminates the need for multiple separate expensive tools

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Loss of information

If comprehensive asset registration is attempted in dynamic cloud environments, then risk profile identification is improved, but human capacity requirements increase

Engineering Contradiction:

Improverisk profile identification accuracyVSAvoidhuman capacity requirements

Core Design Contradiction:

Loss of informationVSEase of operation

Solution Approach 1:

The browser extension performs preliminary automatic capture and organization of security events as they occur in the cloud environment. By pre-processing and structuring security data in real-time, the system eliminates the need for manual asset registration while maintaining comprehensive risk profile identification

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system implements continuous feedback loops where security events are captured, analyzed, and presented back to users through the security toolbar. This automated feedback mechanism replaces manual monitoring and registration tasks, reducing human capacity requirements while improving risk identification accuracy

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS12341803B2Technique and method for detection and display of the cybersecurity risk context of a cloud environment

Publication Date: 2025.06.24 WIZ INC

AI summary

A technique and method for detection and display of the cybersecurity risk context of a cloud environment initiates an inspection of cybersecurity objects within a cloud environment utilizing an inspection environment and stores information pertaining to discovered cybersecurity objects within the inspected cloud environment in a storage environment. The technique and method further generate a cybersecurity risk context for the inspected cloud environment based on the observations made concerning the cybersecurity objects contained within it. The technique and method further configure a web browser running on a client device to automatically display the generated cybersecurity risk context to a user, either through a web page overlay or through a toolbar plugin which has been installed in the web browser and configured to enable inspections of a cloud environment, once the user has navigated to a web page containing cybersecurity object identifiers.