Techniques for cross entity correlation of user accounts in cloud computing environments
AssigneeWiz, Inc.
InventorsRon Konigsberg, Itay Harel, Dan Becker
Life of this patent
Estimating the term…
Abstract
A system and method for performing cross-entity correlation of a service account in a cloud computing environment for applying a cybersecurity control is presented. The method includes detecting a terminal service principal in a cloud computing environment; detecting a hint which connects the terminal service principal to a root service principal; storing a representation of the terminal service principal, and the root service in a security database, wherein the security database includes a representation of the cloud computing environment; and applying a control on representation of the terminal service principal based at least on the root service principal.
Claims20
A method performing cross-entity correlation of a service account in a cloud computing environment for applying a cybersecurity control, comprising:
- detecting a terminal service principal in the cloud computing environment;
- detecting a hint which connects the terminal service principal to a root service principal;
- storing a representation of the terminal service principal, and the root service principal in a security database, wherein the security database includes a representation of the cloud computing environment;
- and
- applying a control on the representation of the terminal service principal based at least on the root service principal.
A non-transitory computer-readable medium storing a set of instructions for a service account in a cloud computing environment for applying a cybersecurity control, the set of instructions comprising:
- one or more instructions that, when executed by one or more processing circuitries of a device, cause the device to:
- detect a terminal service principal in the cloud computing environment;
- detect a hint which connects the terminal service principal to a root service principal;
- store a representation of the terminal service principal, and the root service principal in a security database, wherein the security database includes a representation of the cloud computing environment;
- and
- apply a control on the representation of the terminal service principal based at least on the root service principal.
A system for a service account in a cloud computing environment for applying a cybersecurity control comprising:
- a processing circuitry;
- a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
- detect a terminal service principal in the cloud computing environment;
- detect a hint which connects the terminal service principal to a root service principal;
- store a representation of the terminal service principal, and the root service principal in a security database, wherein the security database includes a representation of the cloud computing environment;
- and
- apply a control on the representation of the terminal service principal based at least on the root service principal.
Dependencies are inferred from the claim text.