US 2026/0099592 A1Published application

Security action based on an ai-determined intent and/or impact of a resource in an enterprise

AssigneeMicrosoft Technology Licensing, LLC

InventorsAmir PIROGOVSKY, Doron BAR SHALOM, Fady COPTY, Amir Berko SCHWARTZ

Life of this patent

Estimating the term…

Loading patent…

Abstract

Techniques are described herein that are capable of performing a security action based on an AI-determined intent and/or impact of a resource in an enterprise. A security alert regarding an identified resource of an enterprise is received. Intents of subsets of information regarding a software application utilized by the enterprise are determined using an AI model. The intents are mapped to subsets of resources in the enterprise and/or the AI model is used to determine impacts of the subsets of the resources on the enterprise. In response to the security alert, a security action is performed with regard to the identified resource as a result of an intent and/or impact associated with the identified resource satisfying an action criterion associated with the security action.

Claims20

Dependent claims

A system comprising:

a processor system;
and
a memory that stores computer-executable instructions that are executable by the processor system to at least:
receive a security alert regarding an identified resource in an information technology infrastructure of an enterprise;
determine intents of subsets of files in a source code management system regarding a software application that is utilized by the enterprise using an artificial intelligence (AI) model by causing the AI model to analyze contents of the files;
map the intents to subsets of resources in the information technology infrastructure based at least on a mapping of the subsets of the files to the subsets of the resources;
and
in response to the security alert, trigger execution of an instruction, which causes a designated security action to be performed with regard to the identified resource by selecting the designated security action from a plurality of security actions, as a result of an identified intent that is mapped to the identified resource satisfying an action criterion associated with the designated security action.

5 more elements

A method implemented by a computing system, the method comprising:

receiving a security alert regarding an identified resource in an information technology infrastructure of an enterprise;
determining first intents of subsets of information regarding a software application that is utilized by the enterprise using an artificial intelligence (AI) model by causing the AI model to analyze the information, the subsets of the information comprising at least one of subsets of documentation regarding the software application or subsets of communications regarding the software application;
determining impacts of subsets of resources in the information technology infrastructure on the enterprise using the AI model by causing the AI model to analyze the subsets of the information based at least on the first intents of the subsets of the information corresponding to second intents of the subsets of the resources;
and
in response to the security alert, triggering execution of an instruction, which causes a designated security action to be performed with regard to the identified resource by selecting the designated security action from a plurality of security actions, as a result of an identified impact of a subset of resources that comprises the identified resource satisfying an action criterion associated with the designated security action.

2 more elements

Dependencies are inferred from the claim text.