Uber Objects for Unified Compute Environment Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The challenge of managing compute environments is exacerbated by the presence of multiple incompatible solutions, leading to alert fatigue due to overlapping detection of threats and lack of a unified view of the environment across different systems.

Innovation Solution

A method and system that generate a compact representation of a compute environment using 'uber objects' in a graph database, integrating metadata from multiple sources to create a unified view, thereby mitigating data conflicts and reducing alert fatigue.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple independent security solutions are deployed to provide comprehensive coverage, then detection capability is improved, but alert volume increases causing alert fatigue

Engineering Contradiction:
Improvedetection capabilityVSAvoidalert volume
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent merges data from multiple independent security solutions into a single unified security graph. Different security tools (endpoint detection, network security, cloud security) contribute their findings to a common graph structure where entities and relationships are standardized. This consolidation allows the system to maintain comprehensive detection coverage while presenting a unified view that reduces duplicate alerts and eliminates redundancy.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The security graph serves as a universal data model that can ingest and represent information from various security sources with different schemas and formats. The graph structure provides a common language and standardized entity types that work across all security solutions, enabling multi-source integration while maintaining the ability to handle diverse input formats and detection methodologies.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If multiple systems interact with the compute environment independently, then system autonomy is maintained, but a unified view of the environment is lost

Engineering Contradiction:
Improvesystem autonomyVSAvoidunified view
Core Design Contradiction:
Adaptability or versatilityVSLoss of information

Solution Approach 1:

The security graph acts as an intermediary layer between multiple independent security systems and the compute environment. Each security tool continues to operate autonomously and interact with the environment in its own way, but all data flows through the graph which standardizes and unifies the representation. The graph mediates between diverse independent systems and provides a consolidated view without restricting system autonomy.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the complex multi-system environment into discrete graph entities (nodes and edges) that represent specific security-relevant elements. By breaking down the environment into manageable graph components such as hosts, processes, networks, and security events, the system maintains the independence of each security tool while organizing their collective view into a structured unified representation.

Inventive Principle:
Principle #1Segmentation

3Measurement precision

If comprehensive security coverage is achieved through multiple solutions, then detection precision is improved, but data complexity increases

Engineering Contradiction:
Improvedetection precisionVSAvoiddata complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent transforms security data from multiple sources by changing its parameters and representation format. Data is converted from various source-specific schemas into a standardized graph model with unified entity types, attributes, and relationship structures. This parameter transformation maintains the precision of detection from each source while reducing the complexity of managing diverse data formats through standardization.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS20240289435A1Techniques for the execution of workflows on uber objects and compact representation in storage thereof
Publication Date: 2024.08.29 AVALOR TECH LTD
  • US20240289435A1 patent drawing
  • US20240289435A1 patent drawing
  • US20240289435A1 patent drawing

AI summary

A system and method for generating a compact representation of a compute environment based on generating uber objects in a graph database from a plurality of sources is disclosed. The method includes receiving object metadata of an entity from a first source; receiving object metadata of the cloud entity from a second source, the second source operating independently of the first source; and generating an uber node representing the cloud entity based on a predefined schema in a graph database, the received object metadata from the first source and the received object metadata from the second source.