Privilege Usage Index for Least-Privilege Policy Conformance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer systems struggle to determine conformance with the Principle of Least Privilege (POLP) due to their complexity and dynamic nature, making it difficult for administrators to assess and adjust security policies effectively.
Innovation Solution
A method and system to quantify conformance to POLP by calculating a Privilege Use Index (PUI) based on metrics such as privilege usage and resource availability, allowing for automated or manual adjustments to improve adherence.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If manual monitoring of privilege usage is performed, then administrators can assess POLP conformance, but the process becomes labor-intensive and inefficient
Solution Approach 1:
The system automatically monitors and evaluates privilege usage without requiring manual intervention. The privilege usage index calculation is performed autonomously by the system, allowing administrators to receive ready-to-use assessments without manual monitoring efforts.
Solution Approach 2:
The patent replaces manual mechanical monitoring processes with automated electronic calculation systems. The privilege usage index is computed through automated analysis of privilege data, substituting the manual assessment process with an automated computational approach.
2Measurement precision
If comprehensive privilege monitoring is implemented, then POLP conformance can be accurately assessed, but system complexity increases
Solution Approach 1:
The patent segments the complex privilege monitoring task into distinct components: privilege data collection, usage analysis, and conformance evaluation. The privilege usage index breaks down the assessment into measurable components, making the overall system more manageable despite comprehensive monitoring requirements.
Solution Approach 2:
The system transforms complex privilege data into a simplified parameter - the privilege usage index. This parameter condenses multiple dimensions of privilege usage information into a single measurable value, reducing the complexity of analysis while maintaining measurement precision.
3Manufacturing precision
If detailed privilege usage tracking is performed, then accurate POLP assessment is achieved, but administrative burden increases
Solution Approach 1:
The system provides automated feedback to administrators in the form of privilege usage index results. This feedback mechanism delivers precise conformance assessments without requiring administrators to manually analyze detailed privilege data, maintaining both precision and ease of operation.
Solution Approach 2:
The privilege usage index acts as an intermediary that translates complex detailed privilege usage data into a simplified assessment metric. This intermediary allows administrators to access precise conformance information without directly interacting with the complexity of underlying privilege tracking systems.
Data Source
AI summary
Access privileges of at least one identity to resources are adjusted within an authorization system of a computing environment. Over a detection period, accesses by the identity to the resources are detected and a usage score is computed as a usage function of a measure of use by the identity of access privilege(s) it has been granted to at least one of the resources relative to a measure of a set of possible grantable privileges. In accordance with a least privilege security policy, and according to the usage score, the set of access privileges granted to the identity may then be adjusted.