Determination of user reputation regarding data object exposure in cloud computing environments
AssigneePalo Alto Networks, Inc.
InventorNishant Doshi
Life of this patent
Estimating the term…
Abstract
Embodiments disclosed herein provide systems, methods, and computer readable media for determining user reputation regarding data object exposure in a cloud computing environment. In a particular embodiment, a method provides receiving, from the cloud computing environment, information regarding behavior of a user in the cloud computing environment. The method further provides analyzing the information to determine a plurality of exposure characteristics for the user. The method provides determining a reputation of the user for exposing data objects in the cloud computing environment based on the plurality of exposure characteristics.
Claims20
A method of determining user reputation regarding data object exposure in a cloud computing environment, comprising:
- in a reputation analysis system, using at least one Application Programming Interface (API) call to execute code in the cloud computing environment that instructs the cloud computing environment on behalf of the reputation analysis system to transfer information regarding behavior of a user in the cloud computing environment to the reputation analysis system either periodically or upon at least one trigger;
- in the reputation analysis system, receiving the information from the cloud computing environment;
- analyzing the information to determine a plurality of exposure characteristics for the user, wherein each exposure characteristic of the plurality of exposure characteristics comprises one or more items of the information that indicate exposure of a plurality of data objects associated with the user and include one or more of a number of container objects created by the user, a number of objects created by the user in the cloud computing environment, and a ratio of the number of container objects created by the user to a number of non-container objects created by the user, and wherein the exposure of the plurality of data objects comprises accessibility of the plurality of data objects beyond what is desired by an interested party to the plurality of data objects;
- and
- determining a reputation of the user for exposing the plurality of data objects in the cloud computing environment based on the plurality of exposure characteristics.
A non-transitory computer readable storage medium having instructions stored thereon for operating a reputation analysis system to determine user reputation regarding data object exposure in a cloud computing environment, the instructions, when executed by the reputation analysis system, direct the reputation analysis system to:
- use at least one Application Programming Interface (API) call to execute code in the cloud computing environment that instructs the cloud computing environment on behalf of the reputation analysis system to transfer information regarding behavior of a user in the cloud computing environment either periodically or upon at least one trigger;
- receive the information from the cloud computing environment;
- analyze the information to determine a plurality of exposure characteristics for the user, wherein each exposure characteristic of the plurality of exposure characteristics comprises one or more items of the information that indicate exposure of a plurality of data objects associated with the user and include one or more of a number of container objects created by the user, a number of objects created by the user in the cloud computing environment, and a ratio of the number of container objects created by the user to a number of non-container objects created by the user, and wherein the exposure of the plurality of data objects comprises accessibility of the plurality of data objects beyond what is desired by an interested party to the plurality of data objects;
- and
- determine a reputation of the user for exposing the plurality of data objects in the cloud computing environment based on the plurality of exposure characteristics.
A reputation analysis system for determining user reputation regarding data object exposure in a cloud computing environment, comprising:
- a network communication interface configured to receive, from the cloud computing environment, information regarding behavior of a user in the cloud computing environment;
- and
- a processing system configured to use at least one Application Programming Interface (API) call to execute code in the cloud computing environment that instructs the cloud computing environment on behalf of the reputation analysis system to transfer the information to the reputation analysis system either periodically or upon at least one trigger, analyze the information to determine a plurality of exposure characteristics for the user, wherein each exposure characteristic of the plurality of exposure characteristics comprises one or more items of the information that indicate exposure of a plurality of data objects associated with the user and include one or more of a number of container objects created by the user, a number of objects created by the user in the cloud computing environment, and a ratio of the number of container objects created by the user to a number of non-container objects created by the user, and wherein the exposure of the plurality of data objects comprises accessibility of the plurality of data objects beyond what is desired by an interested party to the plurality of data objects, and determining a reputation of the user for exposing the plurality of data objects in the cloud computing environment based on the plurality of exposure characteristics.
Dependencies are inferred from the claim text.