System and method for securing computer infrastructure and devices that depend on cloud platforms

A system for securing computer infrastructure and one or more devices that depend on one or more cloud platforms, wherein the system comprises,

• a memory that stores a set of instructions;
• and
• a processor that executes the set of instructions, wherein the processor is configured to:
• extract one or more information data from at least one of the cloud platforms or the one or more devices that depend on the one or more cloud platforms, wherein the one or more information data comprises at least one of system information from the one or more cloud platforms, configuration information, system information from cloud platform associated services, non-cloud infrastructure information, or asset information, wherein the system information from the one or more cloud platforms comprises users, an access right associated with the users, an authentication method associated with the users, groups associated with the users, VPC configuration information and assets contained in the VPC configuration information, wherein the configuration information comprises the VPC configuration information and the assets contained in the VPC configuration, wherein the non-cloud infrastructure information comprises endpoint configuration security information comprising at least one of use of encrypted storage, Virtual Private Network (VPN), 2FA, antivirus checkers, whitelist of applications or traffic monitoring, from the one or more devices, wherein the asset information comprises physical security information using management asset systems;
• execute compliance tests to identify compliance and non-compliance in the one or more information data;
• generate a network topology map of the one or more cloud platforms by querying the one or more information data, wherein the querying of the one or more information data comprises (i) identifying an environment with the one or more information data, (ii) creating a tree for the identified environment, and (iii) converting the tree into a directed graph, wherein the directed graph generates the network topology map using a rendering engine;
• classify, using a machine learning model, a connectivity between the one or more devices and their nature with at least one of logs, fire-wall rules, Virtual Private Cloud (VPC) accesses, or a cloud storage level logs and object level access logs, extracted from the one or more information data, wherein the machine learning model is configured to (i) record the connectivity between the one or more devices that are consolidated under the one or more cloud platforms and (ii) analyse the records to determine which endpoints of the one or more devices that are in connectivity with each other;
• compute, using the machine learning model, risk metrics based on at least one of the network topology map, software running on the computer infrastructure or the one or more devices that depend on the one or more cloud platforms, the connectivity between the one or more devices or criticality of the asset information;
• re-execute the compliance tests to detect changes in the identified compliance in the one or more information data;
• and
• implement security compliances without impacting a production or operational environment of the one or more cloud platforms when there is a change in the compliance in the one or more information data, for securing the computer infrastructure and the one or more devices that depend on the one or more cloud platforms.