Back to results
US 12,003,546 B1Granted
System and method for security control over data flows in distributed computing systems
AssigneeCaber Systems, Inc.
InventorRobert Lauro Quiros
Life of this patent
Estimating the term…
Abstract
The present application generally relates to methods, systems, and programming for detecting security issues within a computing environment. In some embodiments, data flows may be analyzed to determine links between data sources and metadata. Using the derived relationships, a determination may be made as to whether the is a security issue, such as a security policy ambiguity, or a potential security issue. If so, one or more actions may be taken to prevent or minimize an impact of the security issue.
Claims20
A non-transitory computer-readable medium storing computer program instructions that, when executed by one or more processors, effectuates operations comprising:
- determining, via a security controller deployed within an environment of a user, relationships between entities associated with data flows within the environment;
- generating, via the security controller, based on the relationships, a computing environment map, wherein data sources and metadata of the data flows are represented as nodes within the computing environment map;
- determining, via the security controller, a strength metric of a link between a first data source and a second data source exceeds a strength metric threshold indicating that the first data source and the second data source are part of a first data flow, the data sources comprising the first data source and the second data source;
- extracting, via the security controller, from the first data source and the second data source, respectively, a first group access key and a second group access key;
- retrieving, via the security controller, a first value corresponding to the first group access key from the first data source and a second value corresponding to the second group access key from the second data source, wherein the first value and the second value each represent a security policy associated with, respectively, the first data source and the second data source;
- determining, via the security controller, whether the first value and the second value satisfy a security policy similarity condition, wherein the security policy similarity condition is satisfied response to determining that the first value and the second value represent a same security policy;
- and
- responsive to determining that the first value and the second value fail to satisfy the security policy similarity condition, generating, via the security controller, an alert indicating an inconsistent security policy has been detected on the first data flow associated with the first data source and the second data source.
5 more elements
A method, implemented by one or more processors configured to execute computer program instructions stored within memory to perform the method, the method comprising:
- determining, via a security controller deployed within an environment of a user, relationships between entities associated with data flows within the environment;
- generating, via the security controller, based on the relationships, a computing environment map, wherein data sources and metadata of the data flows are represented as nodes within the computing environment map;
- determining, via the security controller, a strength metric of a link between a first data source and a second data source exceeds a strength metric threshold indicating that the first data source and the second data source are part of a first data flow, the data sources comprising the first data source and the second data source;
- extracting, via the security controller, from the first data source and the second data source, respectively, a first group access key and a second group access key;
- retrieving, via the security controller, a first value corresponding to the first group access key from the first data source and a second value corresponding to the second group access key from the second data source, wherein the first value and the second value each represent a security policy associated with, respectively, the first data source and the second data source;
- determining, via the security controller, whether the first value and the second value satisfy a security policy similarity condition, wherein the security policy similarity condition is satisfied response to determining that the first value and the second value represent a same security policy;
- and
- responsive to determining that the first value and the second value fail to satisfy the security policy similarity condition, generating, via the security controller, an alert indicating an inconsistent security policy has been detected on the first data flow associated with the first data source and the second data source.
5 more elements
Dependencies are inferred from the claim text.