Cloud Security Risk Scoring for Stale Access Detection

The patent segments the security management function into separate services: a first service that determines access frequencies and generates access frequency scores, and a second service that determines last access times and generates last access scores. This segmentation allows each service to specialize in specific security assessment tasks, reducing the overall management complexity while maintaining comprehensive security coverage across multiple landscape components.

The patent implements a universal risk score calculation mechanism that aggregates multiple security metrics (access frequency score, last access score, and other security-related scores) into a single total risk score. This multi-functional approach allows the system to assess security risks across diverse landscape components and user access patterns through a unified framework, simplifying management while maintaining versatility.

The patent applies partial action by calculating risk scores based on specific security parameters (access frequency, last access time) rather than monitoring all possible system parameters. The system selectively monitors only the security-relevant metrics that contribute to the risk assessment, achieving reliable security detection without the computational overhead of comprehensive system monitoring.

The system performs self-service security assessment by automatically generating risk scores and identifying high-risk users without requiring external intervention. The automated calculation of access frequency scores, last access scores, and total risk scores reduces the need for manual security audits and computational resource consumption while maintaining high reliability in security detection.