Unified Multi-Cloud Risk Ranking Platform

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Managing multi-cloud environments is challenging due to the complexity of provisioning cloud services and obtaining a holistic view of security and compliance across hybrid and multi-cloud workloads, leading to difficulties in timely visibility and increased security risks.

Innovation Solution

A trust platform that provides a unified view of multi-cloud relative risk information by aggregating data from various monitoring tools across tenant and management environments, offering a single pane of glass for managing cloud assets and deploying security and compliance controls consistently across multiple cloud service providers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple monitoring tools are deployed across tenant and management environments in multi-cloud setups, then comprehensive security coverage is improved, but system complexity and difficulty of management increase

Engineering Contradiction:
Improvesecurity coverageVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines multiple monitoring tools and their data sources into a unified trust platform that aggregates security information from both tenant and management environments across multi-cloud deployments. This merging approach maintains comprehensive security coverage while reducing the operational complexity of managing disparate tools by providing a single integrated interface for security monitoring and risk assessment.

Inventive Principle:
Principle #5Merging (Combining)

2Loss of information

If data is aggregated from multiple cloud service providers and environments, then holistic security visibility is improved, but data integration complexity increases

Engineering Contradiction:
Improvesecurity visibilityVSAvoiddata integration complexity
Core Design Contradiction:
Loss of informationVSDevice complexity

Solution Approach 1:

The trust platform serves as an intermediary layer between multiple cloud service providers and the security monitoring system. It standardizes data collection from diverse cloud environments and tools, transforming heterogeneous security data into a unified format that enables holistic visibility without requiring complex point-to-point integrations between each tool and environment.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Productivity

If relative risk ranking is implemented across multi-cloud assets, then security prioritization is improved, but computational processing requirements increase

Engineering Contradiction:
Improvesecurity prioritization efficiencyVSAvoidcomputational processing
Core Design Contradiction:
ProductivityVSPower

Solution Approach 1:

The system transforms complex multi-dimensional security data into a simplified relative risk ranking parameter that prioritizes assets based on their security posture. By changing the representation of security information from raw multi-parameter data to a standardized risk ranking metric, the system enables efficient security prioritization while reducing the computational burden of analyzing and comparing security states across numerous cloud assets.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11509681B2Relative risk ranking of cloud assets used in multi-cloud workloads
Publication Date: 2022.11.22 EMC IP HLDG CO LLC
  • US11509681B2 patent drawing
  • US11509681B2 patent drawing
  • US11509681B2 patent drawing

AI summary

An apparatus comprises a processing device configured to receive, at a user interface of a trust platform configured to manage cloud assets operating in clouds of two or more cloud service providers, a request to view multi-cloud relative risk information for at least a subset of the cloud assets on which workloads of a given entity run. The processing device is also configured to obtain, utilizing application programming interfaces of the trust platform, first and second sets of cloud asset risk data generated by first and second pluralities of monitoring tools operating in tenant and management environments of the clouds of the two or more cloud service providers. The processing device is further configured to generate and provide, at the user interface of the trust platform, a unified view of the multi-cloud relative risk information utilizing the first and second sets of cloud asset risk data.