Modeling permission risk in the cloud
OwnerKevin Alejandro Roundy, Robin O. Roundy +2inventors
InventorsKevin Alejandro Roundy, Robin O. Roundy, Gaurav Rastogi, Kamalakannan Congevaram Muralidharan
Life of this patent
Estimating the term…
Abstract
A plurality of permissions associated with a user is determined. A corresponding risk associated with each of the plurality of permissions is determined. An aggregate risk associated with the plurality of permissions associated with the user as a whole is determined to generate an identity risk based on the determined corresponding risk associated with each of the plurality of permissions. It is determined which of the plurality of permissions are used by the user. One or more roles for the user are configured based on the determined aggregate risk and the determined use.
Claims20
A method, comprising:
- determining a plurality of permissions associated with a user;
- determining a corresponding risk associated with each of the plurality of permissions;
- determining an aggregate risk associated with the plurality of permissions associated with the user as a whole to generate an identity risk based on the determined corresponding risk associated with each of the plurality of permissions;
- determining which of the plurality of permissions are used by the user;
- and
- configuring one or more roles for the user based on the determined aggregate risk and the determined use.
A system, comprising:
- a processor configured to:
- determine a plurality of permissions associated with a user;
- determine a corresponding risk associated with each of the plurality of permissions;
- determine an aggregate risk associated with the plurality of permissions associated with the user as a whole to generate an identity risk based on the determined corresponding risk associated with each of the plurality of permissions;
- determine which of the plurality of permissions are used by the user;
- and
- configure one or more roles for the user based on the determined aggregate risk and the determined use;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:
- determining a plurality of permissions associated with a user;
- determining a corresponding risk associated with each of the plurality of permissions;
- determining an aggregate risk associated with the plurality of permissions associated with the user as a whole to generate an identity risk based on the determined corresponding risk associated with each of the plurality of permissions;
- determining which of the plurality of permissions are used by the user;
- and
- configuring one or more roles for the user based on the determined aggregate risk and the determined use.
Dependencies are inferred from the claim text.