Systems and methods for passive key identification

A method for matching keys with compute resources, the method comprising:

• analyzing a cloud environment to identify a plurality of keys to the compute resources in the cloud environment, wherein each key includes a credential for granting permission to access at least one of the compute resources, access a service provided by at least one of the compute resources, or access a function provided by at least one of the compute resources;
• performing a cryptographic analysis on the plurality of keys to identify a first set of fingerprints that uniquely identify each of the plurality of keys, the first set of fingerprints being non-identical to any key of the plurality of keys and non-functional for use as a key to access the compute resources, services provided by the compute resources, or functions provided by the compute resources;
• analyzing trust configurations of the compute resources to identify a second set of fingerprints for each of the compute resources;
• and
• preventing generation of associated activity patterns misidentified as caused by malicious code or by an attacker to the system by identifying matching relationships between the plurality of keys and the compute resources without using any of the plurality of keys to access the compute resources, as a result of comparing the first set of fingerprints with the second set of fingerprints.

A non-transitory computer-readable medium storing instructions that, when executed by at least one hardware processor, are configured to cause the at least one hardware processor to perform operations for matching keys with compute resources, the operations comprising:

• analyzing a cloud environment to identify a plurality of keys to the compute resources in the cloud environment, wherein each key includes a credential for granting permission to access at least one of the compute resources, access a service provided by at least one of the compute resources, or access a function provided by at least one of the compute resources;
• performing a cryptographic analysis on the plurality of keys to identify a first set of fingerprints that uniquely identify each of the plurality of keys, the first set of fingerprints being non-identical to any key of the plurality of keys and non-functional for use as a key to access the compute resources, services provided by the compute resources, or functions provided by the compute resources;
• analyzing trust configurations of the compute resources to identify a second set of fingerprints for each of the compute resources;
• and
• preventing generation of associated activity patterns misidentified as caused by malicious code or by an attacker to the system by identifying matching relationships between the plurality of keys and the compute resources without using any of the plurality of keys to access the compute resources, as a result of comparing the first set of fingerprints with the second set of fingerprints.