# US 12,192,270 B1 · System and method for analyzing network objects in a cloud environment > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,192,270 B1 - Document ID: US12192270B1 - Status: Granted - Kind: B1 - Application number: 18/887,753 - Filed: 2024-09-17 - Published: 2025-01-09 - Granted: 2025-01-07 - Earliest claimed: 2020-12-02 - Assignees: Wiz, Inc. - Applicants: Wiz, Inc. - Inventors: Shai Keren; Daniel Hershko Shemesh; Roy Reznik; Ami Luttwak; Avihai Berkovitz - Web page: https://patentgrep.com/patent/US12192270B1 ## CPC - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04L 41/046: comprising network management agents or mobile agents therefor - H04L 41/0843: {based on generic templates} - H04L 41/12: Discovery or management of network topologies - H04L 41/14: Network analysis or design - H04L 41/40: using virtualisation of network functions or resources, e.g. SDN or NFV entities - H04L 41/5096: {wherein the managed service relates to distributed or central networked applications} - H04L 49/70: {Virtual switches} - H04L 63/102: {Entity profiles} - H04L 63/1433: {Vulnerability analysis} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method and system for providing textual insights on objects deployed in a cloud environment are provided. The method includes collecting object data on objects deployed in the cloud environment, wherein objects are deployed and operable at different layers of the cloud environment; identifying objects deployed in the cloud environment; constructing a visual representation of the cloud environment, including the identified objects and their relationships; and generating textual insights on the identified objects and their relationships using natural language processing. ## Claims ### Claim 1 A method for determining reachability of vulnerable network objects having cyber-threats, comprising: collecting network object data on a plurality of network objects deployed in a cloud computing environment; constructing a network graph based on the collected network object data, wherein the network graph includes a visual representation of network objects identified in the cloud computing environment; determining relationships between the identified network objects in the network graph, wherein the determined relationships between the identified network objects includes descriptions of connections between the identified network objects; analyzing the network graph and the determined relationships to generate insights, wherein the generated insights include at least a route between the identified network objects; and tagging network objects in the network graph for which the insight is generated. ### Claim 2 (depends on 1) The method of claim 1, further comprising: determining a number of transmissions based on a route between a first identified network object and a second identified network object; and generating a visual indication of the number of transmissions. ### Claim 3 (depends on 2) The method of claim 2, further comprising: determining an order of transmission between the identified network objects; and populating the network graph with a data path based on the determined order of transmission and the determined route. ### Claim 4 (depends on 1) The method of claim 1, further comprising: generating a list including each network object in the route between the identified network objects. ### Claim 5 (depends on 4) The method of claim 4, further comprising: determining an order of transmission between the identified network objects; and generating the list further based on the determined order of transmission. ### Claim 6 (depends on 5) The method of claim 5, further comprising: generating a visual representation of the generated list. ### Claim 7 (depends on 1) The method of claim 1, further comprising: populating the network graph with a data path between a first network object and a destination network object. ### Claim 8 (depends on 7) The method of claim 7, further comprising: determining an order of transmission between the identified network objects; and populating the network graph with the data path further based on the determined order of transmission. ### Claim 9 (depends on 1) The method of claim 1, further comprising: detecting an anomaly based on the generated network insights. ### Claim 10 A non-transitory computer-readable medium storing a set of instructions for determining reachability of vulnerable network objects having cyber-threats, the set of instructions comprising: one or more instructions that, when executed by one or more processors of a device, cause the device to: collect network object data on a plurality of network objects deployed in a cloud computing environment; construct a network graph based on the collected network object data, wherein the network graph includes a visual representation of network objects identified in the cloud computing environment; determine relationships between the identified network objects in the network graph, wherein the determined relationships between the identified network objects includes descriptions of connections between the identified network objects; analyze the network graph and the determined relationships to generate insights, wherein the generated insights include at least a route between the identified network objects; and tag network objects in the network graph for which the insight is generated. ### Claim 11 A system for determining reachability of vulnerable network objects having cyber-threats comprising: a processing circuitry; a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to: collect network object data on a plurality of network objects deployed in a cloud computing environment; construct a network graph based on the collected network object data, wherein the network graph includes a visual representation of network objects identified in the cloud computing environment; determine relationships between the identified network objects in the network graph, wherein the determined relationships between the identified network objects includes descriptions of connections between the identified network objects; analyze the network graph and the determined relationships to generate insights, wherein the generated insights include at least a route between the identified network objects; and tag network objects in the network graph for which the insight is generated. ### Claim 12 (depends on 11) The system of claim 11, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to: determine a number of transmissions based on a route between a first identified network object and a second identified network object; and generate a visual indication of the number of transmissions. ### Claim 13 (depends on 12) The system of claim 12, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to: determine an order of transmission between the identified network objects; and populate the network graph with a data path based on the determined order of transmission and the determined route. ### Claim 14 (depends on 11) The system of claim 11, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to: generate a list including each network object in the route between the identified network objects. ### Claim 15 (depends on 14) The system of claim 14, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to: determine an order of transmission between the identified network objects; and generate the list further based on the determined order of transmission. ### Claim 16 (depends on 15) The system of claim 15, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to: generate a visual representation of the generated list. ### Claim 17 (depends on 11) The system of claim 11, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to: populate the network graph with a data path between a first network object and a destination network object. ### Claim 18 (depends on 17) The system of claim 17, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to: determine an order of transmission between the identified network objects; and populate the network graph with the data path further based on the determined order of transmission. ### Claim 19 (depends on 11) The system of claim 11, wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to: detect an anomaly based on the generated network insights.