US 10,374,906 B2Granted

Cloud security tool

AssigneeBank of America Corporation

InventorsAnant Bondalapati Sharma, Rohit Kumar Jain, Sasidhar Purushothaman

Life of this patent

Estimating the term…

Loading patent…

Abstract

An apparatus includes a scanner and a cloud engine. The scanner determines that a first cloud environment is of a first type and that a second cloud environment is of a second type that is different from the first type. The cloud engine selects a first tool and a second tool. The cloud engine also sets a first parameter and a first configuration for the first tool and a second parameter and a second configuration for the second tool. The cloud engine further receives a first alert that a security vulnerability in the first cloud environment has been detected and a second alert that resource consumption in the second cloud environment has exceeded a threshold. The cloud engine communicates a first solution to resolve the security vulnerability in the first cloud environment and a second solution to lower resource consumption in the second cloud environment.

Claims21

Dependent claims

An apparatus comprising:

a scanner configured to:
determine that a first cloud environment is of a first type;
and
determine that a second cloud environment is of a second type that is different from the first type;
and
a memory and a hardware processor communicatively coupled to the memory, the hardware processor configured to implement a cloud engine configured to:
select, based on the first type of the first cloud environment, a first tool;
select, based on the second type of the second cloud environment, a second tool;
set a first parameter and a first configuration for the first tool based on the first type of the first cloud environment;
set a second parameter and a second configuration for the second tool based on the second type of the second cloud environment;
receive, from the first tool, a first alert that a security vulnerability in the first cloud environment has been detected;
receive, from the second tool, a second alert that resource consumption in the second cloud environment has exceeded a threshold;
in response to the first alert, communicate a first solution to resolve the security vulnerability in the first cloud environment;
and
in response to the second alert, communicate to the second tool a second solution to lower resource consumption in the second cloud environment.

12 more elements

A system comprising:

a first cloud environment;
a second cloud environment;
and
a cloud security tool comprising a memory and a hardware processor communicatively coupled to the memory, the hardware processor configured to:
determine that the first cloud environment is of a first type;
determine that the second cloud environment is of a second type that is different from the first type;
select, based on the first type of the first cloud environment, a first tool;
select, based on the second type of the second cloud environment, a second tool;
set a first parameter and a first configuration for the first tool based on the first type of the first cloud environment;
set a second parameter and a second configuration for the second tool based on the second type of the second cloud environment;
receive, from the first tool, a first alert that a security vulnerability in the first cloud environment has been detected;
receive, from the second tool, a second alert that resource consumption in the second cloud environment has exceeded a threshold;
in response to the first alert, communicate a first solution to resolve the security vulnerability in the first cloud environment;
and
in response to the second alert, communicate to the second tool a second solution to lower resource consumption in the second cloud environment.

12 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/672,535Filed 9 Aug 2017
Published: US 2019/0052544 A114 Feb 2019
Granted: 6 Aug 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification14 codes

G06F 21/554
Detecting local intrusion or implementing counter-measures: involving event detection and direct action
G06F 9/45558
Hypervisors; Virtual machine monitors: hypervisor-specific management and integration aspects
G06F 21/577
Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates…:…
H04L 41/046
Network management architectures or arrangements: comprising network management agents or mobile agents therefor

Family

US 2019/0052544 A1Pre-grant publication · published 14 Feb 2019
US 10,374,906 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key