System and method for analyzing network objects in a cloud environment
AssigneeWiz, Inc.
InventorsShai Keren, Daniel Hershko Shemesh, Roy Reznik, Ami Luttwak, Avihai Berkovitz
Life of this patent
Estimating the term…
Abstract
A method and system for providing textual insights on objects deployed in a cloud environment are provided. The method includes collecting object data on objects deployed in the cloud environment, wherein objects are deployed and operable at different layers of the cloud environment; identifying objects deployed in the cloud environment; constructing a visual representation of the cloud environment, including the identified objects and their relationships; and generating textual insights on the identified objects and their relationships using natural language processing.
Claims19
A method for determining exposure of vulnerable network objects having cyber-threats, comprising:
- collecting network data on a plurality of network objects deployed in a networked computing environment;
- constructing a network graph based on the collected network data, wherein the network graph includes a representation of network objects identified in the networked computing environment;
- determining relationships between the identified network objects in the network graph, wherein the determined relationships between the identified network objects includes a description of connections between the identified network objects;
- analyzing the network graph and the determined relationships to generate insights, wherein the generated insights include at least a route between an identified network object and an external network;
- and
- tagging network objects in the network graph for which the insight is generated.
A non-transitory computer-readable medium storing a set of instructions for determining exposure of vulnerable network objects having cyber-threats, the set of instructions comprising:
- one or more instructions that, when executed by one or more processors of a device, cause the device to:
- collect network data on a plurality of network objects deployed in a networked computing environment;
- construct a network graph based on the collected network data, wherein the network graph includes a representation of network objects identified in the networked computing environment;
- determine relationships between the identified network objects in the network graph, wherein the determined relationships between the identified network objects includes a description of connections between the identified network objects;
- analyze the network graph and the determined relationships to generate insights, wherein the generated insights include at least a route between an identified network object and an external network;
- and
- tag network objects in the network graph for which the insight is generated.
A system for determining exposure of vulnerable network objects having cyber-threats comprising:
- a processing circuitry;
- a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
- collect network data on a plurality of network objects deployed in a networked computing environment;
- construct a network graph based on the collected network data, wherein the network graph includes a representation of network objects identified in the networked computing environment;
- determine relationships between the identified network objects in the network graph, wherein the determined relationships between the identified network objects includes a description of connections between the identified network objects;
- analyze the network graph and the determined relationships to generate insights, wherein the generated insights include at least a route between an identified network object and an external network;
- and
- tag network objects in the network graph for which the insight is generated.
Dependencies are inferred from the claim text.