Cloud Toxic Combination Detection Using IaC Security Graphs

Solution Overview

Problem

The evolving nature of cyber threats and complex interplay of technological, human, and organizational factors make it difficult to predict and manage cybersecurity risks effectively, especially in cloud computing environments with expanding attack surfaces and interconnected systems.

Innovation Solution

A system and method that utilizes infrastructure as code (IaC) to inspect and detect cybersecurity objects in cloud environments, generating a security graph to identify toxic combinations and initiate mitigation actions, thereby enhancing threat detection and management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If data-driven approaches and machine learning algorithms are used to identify patterns and anomalies, then threat detection capability is improved, but the complexity of the system and difficulty in predicting cybersecurity problems increases

Engineering Contradiction:

Improvethreat detection capabilityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system segments the cybersecurity inspection process into distinct phases: pre-deployment code object inspection, deployment monitoring, and post-deployment analysis. This segmentation allows complex threat detection to be broken down into manageable stages, reducing overall system complexity while maintaining high detection capability through specialized inspection functions at each phase.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system performs preliminary inspection of code objects before deployment to identify potential toxic combinations and cybersecurity issues. By detecting and mitigating problems in advance during the code inspection phase, the system reduces the complexity of real-time threat detection and prevents issues from escalating, thereby improving reliability without proportionally increasing operational complexity.

Inventive Principle:

Principle #10Preliminary action

2Measurement precision

If inspection and detection of cybersecurity objects is performed continuously, then threat detection accuracy is improved, but processing time and resource consumption increase

Engineering Contradiction:

Improvethreat detection accuracyVSAvoidprocessing time

Core Design Contradiction:

Measurement precisionVSLoss of time

Solution Approach 1:

The system performs preliminary inspection of code objects before deployment to identify potential toxic combinations and cybersecurity issues. By detecting and mitigating problems in advance during the code inspection phase, the system reduces the complexity of real-time threat detection and prevents issues from escalating, thereby improving reliability without proportionally increasing operational complexity.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system skips detailed continuous inspection of deployed entities by relying on pre-deployment code object inspection. Once the code is inspected and approved before deployment, the system assumes the security posture is established, allowing it to skip intensive continuous monitoring and focus resources on pre-prevention activities, thereby reducing processing time while maintaining accuracy.

Inventive Principle:

Principle #21Skipping (Rushing through)

3Reliability

If comprehensive inspection of code objects and entities is performed, then detection of toxic combinations is improved, but memory and processor requirements increase

Engineering Contradiction:

Improvedetection of toxic combinationsVSAvoidprocessor and memory usage

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The system performs preliminary inspection of code objects before deployment to identify potential toxic combinations and cybersecurity issues. By detecting and mitigating problems in advance during the code inspection phase, the system reduces the complexity of real-time threat detection and prevents issues from escalating, thereby improving reliability without proportionally increasing operational complexity.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system extracts and inspects only the critical code objects and configurations that could lead to toxic combinations, rather than performing comprehensive inspection of all deployed entities. By focusing inspection resources on high-risk code elements and extracting only necessary security checks, the system maintains high detection reliability while reducing processor and memory consumption.

Inventive Principle:

Principle #2Taking out (Extraction)

Data Source

PatentUS20250350610A1System and method for cybersecurity toxic combination precognition

Publication Date: 2025.11.13 WIZ INC

AI summary

A system and method for detecting a cybersecurity toxic combination prior to a virtual instance deployment is presented. The method includes: inspecting an entity in a cloud computing environment for a cybersecurity object, the cybersecurity object; detecting the cybersecurity object on the inspected entity; inspecting a code object utilized to deploy a virtual instance in the cloud computing environment prior to deployment of the virtual instance; detecting a toxic combination cybersecurity issue based on the cybersecurity object and the code object; and initiating a mitigation action on the code object.