Cloud Service Risk Assessment Using Darknet Intelligence

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current methods for cloud services risk assessment are labor-intensive, costly, and time-consuming, relying on manual questionnaires and third-party validation, which are often uncooperative and lack real-time data, failing to provide accurate and up-to-date risk exposure assessments for enterprises using cloud-based services.

Innovation Solution

A cloud service usage risk assessment system that analyzes enterprise usage behavior and cloud provider risk scores in real-time, using a cloud service registry to store provider information and generate a risk exposure index, providing remediation recommendations based on continuous data collection and dynamic updates.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If manual questionnaire and third-party validation methods are used for cloud service risk assessment, then comprehensive risk evaluation can be achieved, but the process becomes labor-intensive, costly, and time-consuming

Engineering Contradiction:

Improverisk assessment accuracyVSAvoidassessment time

Core Design Contradiction:

Measurement precisionVSLoss of time

Solution Approach 1:

The system performs preliminary actions by continuously collecting and analyzing cloud service provider data, security incident information, and compliance data before formal risk assessments are needed. This pre-positioning of intelligence allows rapid risk evaluation without manual questionnaires, resolving the contradiction between comprehensive assessment and time consumption

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent replaces manual mechanical assessment processes (questionnaires, third-party validation) with automated electronic systems that continuously monitor and analyze cloud service data. This substitution eliminates labor-intensive manual work while maintaining or improving assessment accuracy through real-time data analysis

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Measurement precision

If manual questionnaire methods are used for cloud service risk assessment, then risk evaluation can be performed, but the cost and time requirements increase significantly

Engineering Contradiction:

Improverisk exposure assessment accuracyVSAvoidassessment cost

Core Design Contradiction:

Measurement precisionVSLoss of energy

Solution Approach 1:

The system enables self-service by allowing cloud service providers to automatically submit their security and compliance data to the risk assessment platform. This eliminates the need for external auditors and manual validation processes, significantly reducing assessment costs while maintaining comprehensive risk evaluation capabilities

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces expensive manual assessment mechanisms with automated electronic data collection and analysis systems. The automated system processes cloud service provider submissions, security incident data, and compliance information without human intervention, dramatically reducing the energy and financial costs associated with traditional manual assessment methods

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If traditional questionnaire approaches are used for cloud service risk assessment, then compliance evaluation can be conducted, but the method lacks real-time data and continuous monitoring capabilities

Engineering Contradiction:

Improverisk assessment reliabilityVSAvoidreal-time data capability

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system implements continuous monitoring and data collection from multiple sources including cloud service providers, security incident databases, and compliance repositories. This continuous action ensures risk assessments are always based on current data, providing both high reliability and real-time adaptability simultaneously

Inventive Principle:

Principle #20Continuity of useful action

Solution Approach 2:

The patent creates a multi-functional platform that performs multiple functions: continuous data collection, real-time analysis, compliance monitoring, and dynamic risk assessment. This universal system handles diverse data types and assessment requirements, making the risk assessment both reliable and adaptable to real-time conditions

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS9674211B2Cloud service usage risk assessment using darknet intelligence

Publication Date: 2017.06.06 SKYHIGH SECURITY LLC

AI summary

A method of assessing a risk level of an enterprise using cloud-based services from one or more cloud service providers includes assessing provider risk scores associated with the one or more cloud service providers and in view of darknet intelligence data; assessing cloud service usage behavior and pattern of the enterprise; and generating a risk score for the enterprise based on the provider risk scores and on the cloud service usage behavior and pattern of the enterprise. The risk score is indicative of the risk of the enterprise relating to the use of the cloud-based services from the one or more cloud service providers.