Cloud Resource Access Mapping for Native Security Mitigation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Securing cloud native environments is challenging due to the need for manual management of numerous assets and adapting to frequent changes, especially in large enterprises with many employees accessing and modifying assets.
Innovation Solution
A method and system for protecting cloud native environments by mapping cloud assets to resources based on access data, detecting improper access, and performing mitigation actions, including reconfiguring assets for active security and monitoring resource access to detect deviations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual management of cloud assets is implemented, then security posture can be controlled, but the complexity and time required increases significantly with the number of assets
Solution Approach 1:
The system enables automated self-service security management by having cloud assets automatically report their security posture and access relationships to a central service. The service then automatically analyzes this data, detects improper accesses, and performs remediation actions without requiring manual intervention for each asset, thus maintaining security while reducing management complexity.
Solution Approach 2:
The system implements continuous feedback loops where security posture data and access patterns are constantly monitored and fed back to the security service. This feedback mechanism enables the system to dynamically detect deviations from proper access patterns and automatically respond to security threats, maintaining high reliability without proportional increase in management complexity.
2Reliability
If manual monitoring of all cloud assets is performed, then security violations can be detected, but the time and resources required become prohibitive
Solution Approach 1:
The system continuously monitors cloud asset access patterns and security posture, feeding this data back to the security service for real-time analysis. This automated feedback mechanism enables continuous detection of security violations without requiring manual monitoring time, as the system self-monitors and reports anomalies automatically.
Solution Approach 2:
The patent replaces manual mechanical monitoring with automated computational systems. The security service uses automated data processing and analysis algorithms to monitor thousands of cloud assets simultaneously, substituting human time and effort with machine-based automated detection that operates continuously without fatigue or delay.
3Reliability
If comprehensive security monitoring is implemented across all assets, then security violations can be identified, but the system complexity and resource requirements increase
Solution Approach 1:
The security service implements a universal multi-functional platform that handles diverse cloud asset types (virtual machines, containers, serverless functions) through a single unified system. This universal service performs multiple functions including posture assessment, access monitoring, anomaly detection, and automated remediation, achieving comprehensive security coverage without proportionally increasing system complexity through standardization and reuse of components.
Data Source
AI summary
A system and method for method for protecting cloud native environments based on cloud resource access. The method includes determining a mapping of a plurality of cloud assets to a plurality of cloud resources based on resource access data for a cloud native environment, wherein the plurality of cloud assets and the plurality of cloud resources are deployed in the cloud native environment, wherein each of the plurality of cloud assets is mapped to at least one associated cloud resource of the plurality of cloud resources; detecting at least one improper resource access based on the mapping and a cloud access security stream for the cloud native environment, wherein each of the at least one improper resource access deviates from the mapping; and performing at least one mitigation action with respect to the detected at least one improper resource access.