Identifying cryptography usage risks
AssigneeISARA Corporation
InventorsJustin Mathews, Rob Williams, Atsushi Yamada
Life of this patent
Estimating the term…
Abstract
In a general aspect, risks associated with cryptography usage in network communication between computing nodes are identified. In some aspects, a network packet capture agent obtains cryptography usage data by examining network traffic communicated by computing nodes in the computing environment. A cryptography usage analysis agent identifies cryptography usage risks based on the cryptography usage data. A cryptographic risk identification agent identifies one or more applications associated with the cryptography usage risks.
Claims22
A method of identifying cryptography usage risks in a computing environment, the method comprising:
- by operation of a cryptography usage analysis agent:
- receiving cryptography usage data obtained by examining network traffic communicated by computing nodes in the computing environment;
- and
- identifying cryptography usage risks within the computing environment based on the cryptography usage data;
- by operation of a cryptographic risk identification agent, identifying one or more applications associated with the cryptography usage risks, wherein identifying the one or more applications comprises:
- identifying a subset of the network traffic associated with the cryptography usage risks;
- extracting communication metadata from the subset of the network traffic;
- identifying a subset of the computing nodes that communicated the subset of the network traffic;
- receiving application network connectivity information from the subset of the computing nodes;
- identifying the one or more applications based on the application network connectivity information and the communication metadata;
- and
- associating the cryptography usage risks with the one or more identified applications;
- and
- further comprising identifying, by operation of a root cause identification agent, one or more root causes of the identified cryptography usage risks.
A computing system comprising a first computing device associated with a first entity, the first computing device comprising:
- one or more processors;
- and memory storing instructions that are operable when executed by the one or more processors to perform operations comprising:
- by operation of a cryptography usage analysis agent;
- receiving cryptography usage data obtained by examining network traffic communicated by computing nodes in the computing environment;
- and identifying cryptography usage risks within the computing environment based on the cryptography usage data;
- by operation of a cryptographic risk identification agent, identifying one or more applications associated with the cryptography usage risks, wherein identifying the one or more applications comprises:
- identifying a subset of the network traffic associated with the cryptography usage risks;
- extracting communication metadata from the subset of the network traffic;
- identifying a subset of the computing nodes that communicated the subset of the network traffic;
- receiving application network connectivity information from the subset of the computing nodes;
- identifying the one or more applications based on the application network connectivity information and the communication metadata;
- and
- associating the cryptography usage risks with the one or more identified applications;
- and
- further comprising identifying, by operation of a root cause identification agent, one or more root causes of the identified cryptography usage risks.
A non-transitory computer-readable medium storing instructions that are operable when executed by data processing apparatus to perform operations comprising:
- by operation of a cryptography usage analysis agent:
- receiving cryptography usage data obtained by examining network traffic communicated by computing nodes in the computing environment;
- and
- identifying cryptography usage risks within the computing environment based on the cryptography usage data;
- by operation of a cryptographic risk identification agent, identifying one or more applications associated with the cryptography usage risks, wherein identifying the one or more applications comprises:
- identifying a subset of the network traffic associated with the cryptography usage risks;
- extracting communication metadata from the subset of the network traffic;
- identifying a subset of the computing nodes that communicated the subset of the network traffic;
- receiving application network connectivity information from the subset of the computing nodes;
- identifying the one or more applications based on the application network connectivity information and the communication metadata;
- and
- associating the cryptography usage risks with the one or more identified applications;
- and
- further comprising identifying, by operation of a root cause identification agent, one or more root causes of the identified cryptography usage risks.
Dependencies are inferred from the claim text.