# US 10,374,906 B2 · Cloud security tool > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,374,906 B2 - Document ID: US10374906B2 - Status: Granted - Kind: B2 - Application number: 15/672,535 - Filed: 2017-08-09 - Published: 2019-02-14 - Granted: 2019-08-06 - Earliest claimed: 2017-08-09 - Assignees: Bank of America Corporation - Applicants: Bank of America Corporation - Inventors: Anant Bondalapati Sharma; Rohit Kumar Jain; Sasidhar Purushothaman - Web page: https://patentgrep.com/patent/US10374906B2 ## CPC - G06F 21/554: {involving event detection and direct action} - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - H04L 41/046: comprising network management agents or mobile agents therefor - H04L 41/0823: characterised by the purposes of a change of settings, e.g. optimising configuration for enhancing reliability (for optimising operational conditions of wireless networks H04W24/02) - H04L 41/0886: {Fully automatic configuration} - H04L 41/28: Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration - H04L 41/5096: {wherein the managed service relates to distributed or central networked applications} - H04L 43/16: Threshold monitoring - H04L 47/822: {Collecting or measuring resource availability data} - G06F 2221/034: Test or assess a computer or a system - H04L 43/0817: by checking functioning - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An apparatus includes a scanner and a cloud engine. The scanner determines that a first cloud environment is of a first type and that a second cloud environment is of a second type that is different from the first type. The cloud engine selects a first tool and a second tool. The cloud engine also sets a first parameter and a first configuration for the first tool and a second parameter and a second configuration for the second tool. The cloud engine further receives a first alert that a security vulnerability in the first cloud environment has been detected and a second alert that resource consumption in the second cloud environment has exceeded a threshold. The cloud engine communicates a first solution to resolve the security vulnerability in the first cloud environment and a second solution to lower resource consumption in the second cloud environment. ## Claims ### Claim 1 An apparatus comprising: a scanner configured to: determine that a first cloud environment is of a first type; and determine that a second cloud environment is of a second type that is different from the first type; and a memory and a hardware processor communicatively coupled to the memory, the hardware processor configured to implement a cloud engine configured to: select, based on the first type of the first cloud environment, a first tool; select, based on the second type of the second cloud environment, a second tool; set a first parameter and a first configuration for the first tool based on the first type of the first cloud environment; set a second parameter and a second configuration for the second tool based on the second type of the second cloud environment; receive, from the first tool, a first alert that a security vulnerability in the first cloud environment has been detected; receive, from the second tool, a second alert that resource consumption in the second cloud environment has exceeded a threshold; in response to the first alert, communicate a first solution to resolve the security vulnerability in the first cloud environment; and in response to the second alert, communicate to the second tool a second solution to lower resource consumption in the second cloud environment. ### Claim 2 (depends on 1) The apparatus of claim 1, wherein the cloud engine is further configured to: determine that a change occurred in the first cloud environment; and change at least one of the first parameter and the first configuration in response to the change. ### Claim 3 (depends on 1) The apparatus of claim 1, wherein the cloud engine is further configured to: determine that a change occurred in the first cloud environment; select, based on the change to the first cloud environment, a third tool; and set a third parameter and a third configuration for the third tool based on the change. ### Claim 4 (depends on 1) The apparatus of claim 1, wherein the cloud engine is further configured to set the threshold based on the second type of the second cloud environment. ### Claim 5 (depends on 1) The apparatus of claim 1, wherein the cloud engine is further configured to generate a report indicating that the security vulnerability has been detected and that resource consumption in the second cloud environment has exceeded the threshold. ### Claim 6 (depends on 1) The apparatus of claim 1, wherein the cloud engine is further configured to generate a blueprint indicating the first cloud environment and the second cloud environment. ### Claim 7 (depends on 1) The apparatus of claim 1, wherein the cloud engine is further configured to determine that an operation should be executed in the first cloud environment based on the second alert. ### Claim 8 A method comprising: determining that a first cloud environment is of a first type; determining that a second cloud environment is of a second type that is different from the first type; selecting, based on the first type of the first cloud environment, a first tool; selecting, based on the second type of the second cloud environment, a second tool; setting a first parameter and a first configuration for the first tool based on the first type of the first cloud environment; setting a second parameter and a second configuration for the second tool based on the second type of the second cloud environment; receiving, from the first tool, a first alert that a security vulnerability in the first cloud environment has been detected; receiving, from the second tool, a second alert that resource consumption in the second cloud environment has exceeded a threshold; in response to the first alert, communicating a first solution to resolve the security vulnerability in the first cloud environment; and in response to the second alert, communicating to the second tool a second solution to lower resource consumption in the second cloud environment. ### Claim 9 (depends on 8) The method of claim 8, further comprising: determining that a change occurred in the first cloud environment; and changing at least one of the first parameter and the first configuration in response to the change. ### Claim 10 (depends on 8) The method of claim 8, further comprising: determining that a change occurred in the first cloud environment; selecting, based on the change to the first cloud environment, a third tool; and setting a third parameter and a third configuration for the third tool based on the change. ### Claim 11 (depends on 8) The method of claim 8, further comprising setting the threshold based on the second type of the second cloud environment. ### Claim 12 (depends on 8) The method of claim 8, further comprising generating a report indicating that the security vulnerability has been detected and that resource consumption in the second cloud environment has exceeded the threshold. ### Claim 13 (depends on 8) The method of claim 8, further comprising generating a blueprint indicating the first cloud environment and the second cloud environment. ### Claim 14 (depends on 8) The method of claim 8, further comprising determining that an operation should be executed in the first cloud environment based on the second alert. ### Claim 15 A system comprising: a first cloud environment; a second cloud environment; and a cloud security tool comprising a memory and a hardware processor communicatively coupled to the memory, the hardware processor configured to: determine that the first cloud environment is of a first type; determine that the second cloud environment is of a second type that is different from the first type; select, based on the first type of the first cloud environment, a first tool; select, based on the second type of the second cloud environment, a second tool; set a first parameter and a first configuration for the first tool based on the first type of the first cloud environment; set a second parameter and a second configuration for the second tool based on the second type of the second cloud environment; receive, from the first tool, a first alert that a security vulnerability in the first cloud environment has been detected; receive, from the second tool, a second alert that resource consumption in the second cloud environment has exceeded a threshold; in response to the first alert, communicate a first solution to resolve the security vulnerability in the first cloud environment; and in response to the second alert, communicate to the second tool a second solution to lower resource consumption in the second cloud environment. ### Claim 16 (depends on 15) The system of claim 15, wherein the cloud security tool is further configured to: determine that a change occurred in the first cloud environment; and change at least one of the first parameter and the first configuration in response to the change. ### Claim 17 (depends on 15) The system of claim 15, wherein the cloud security tool is further configured to: determine that a change occurred in the first cloud environment; select, based on the change to the first cloud environment, a third tool; and set a third parameter and a third configuration for the third tool based on the change. ### Claim 18 (depends on 15) The system of claim 15, wherein the cloud security tool is further configured to set the threshold based on the second type of the second cloud environment. ### Claim 19 (depends on 15) The system of claim 15, wherein the cloud security tool is further configured to generate a report indicating that the security vulnerability has been detected and that resource consumption in the second cloud environment has exceeded the threshold. ### Claim 20 (depends on 15) The system of claim 15, wherein the cloud security tool is further configured to generate a blueprint indicating the first cloud environment and the second cloud environment. ### Claim 21 (depends on 15) The system of claim 15, wherein the cloud security tool is further configured to determine that an operation should be executed in the first cloud environment based on the second alert.