Techniques for fuzzy matching for reducing cybersecurity alert noise in cloud environments

A non-transitory computer-readable medium storing a set of instructions for noise reduction for cybersecurity alerts in a cloud computing environment, the set of instructions comprising:

• one or more instructions that, when executed by one or more processing circuitries of a device, cause the device to:
• receive a plurality of cloud alerts, wherein each cloud alert in the plurality of cloud alerts includes an identifier of a cloud entity;
• initiate a fuzzy search based on the identifier of the cloud entity and a plurality of code objects stored in a code repository of the cloud computing environment;
• determine, based on a result of the fuzzy search, a probability that a code object of the plurality of code objects is associated with the cloud alert;
• remove the cloud alert from the cybersecurity monitoring system in response to determining that the probability exceeds a first predetermined threshold;
• and
• initiate a mitigation action in the cloud computing environment based on the cloud alert in response to determining that the probability is below a second predetermined threshold.

A system for noise reduction for cybersecurity alerts in a cloud computing environment comprising:

• a processing circuitry;
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• receive a plurality of cloud alerts, wherein each cloud alert in the plurality of cloud alerts includes an identifier of a cloud entity;
• initiate a fuzzy search based on the identifier of the cloud entity and a plurality of code objects stored in a code repository of the cloud computing environment;
• determine, based on a result of the fuzzy search, a probability that a code object of the plurality of code objects is associated with the cloud alert;
• remove the cloud alert from the cybersecurity monitoring system in response to determining that the probability exceeds a first predetermined threshold;
• and
• initiate a mitigation action in the cloud computing environment based on the cloud alert in response to determining that the probability is below a second predetermined threshold.