Microservice Network Path Identification for Security Policy Deployment

The patent segments the network connections into two categories: actual active connections and potential inactive connections. The security system only applies security policies to active connections that are currently in use, rather than pre-configuring policies for all possible server-to-server connections. This segmentation allows the system to maintain comprehensive security coverage for actual traffic while avoiding the computational overhead of managing security policies for nonexistent or inactive connections.

The patent implements partial action by applying security policies only to the subset of connections that are actually active, rather than applying policies to all possible connections. The system dynamically identifies and monitors only the necessary connections, performing security checks partially rather than universally, thereby reducing computational resource consumption while maintaining adequate security protection.

The patent segments the connection management approach by maintaining security policy information only for active connections rather than all possible connections. The system divides the connection space into active and inactive segments, storing security policy data only for the active segment, thereby significantly reducing storage requirements while maintaining security coverage for actual network traffic.

The patent applies partial action by storing security policy information only for the partial set of active connections rather than all possible connections. This selective storage approach reduces the quantity of data that must be retained in memory and storage systems, directly addressing the storage requirement challenge while preserving security effectiveness.

The patent segments the monitoring scope to focus only on active connections rather than all possible connections. By dividing the network space into active and inactive segments, the system reduces the complexity of connection tracking and security policy management while maintaining threat detection capability for actual network traffic flows.

The patent implements partial monitoring by applying security surveillance only to active connections rather than all possible connections. This partial action approach reduces the complexity of the monitoring system, decreasing the number of connections that must be tracked and managed, while still providing adequate threat detection for actual network activity.

The patent segments the configuration management task by focusing only on active connections rather than all possible connections. This segmentation simplifies the operational burden on system administrators, who only need to manage security policies for currently active connections, making the system easier to operate and configure while maintaining effective security protection.

The patent applies partial action to configuration management by requiring security policy configuration only for active connections rather than all possible connections. This reduces the operational complexity and ease of operation, allowing administrators to manage fewer security policies while maintaining adequate protection effectiveness.