Patent ID: 11962623
Assignee: WIZ, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 7:
8. A non-transitory computer-readable medium storing a set of instructions for determining an exposure path of vulnerable objects in a cloud environment, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a device, cause the device to:
identify a plurality of network paths in the cloud environment, wherein each network path includes at least two objects deployed in the cloud environment;
statically analyze each object in each respective network path to determine reachability properties of the each object;
analyze the reachability properties determined for each object to determine if and how the respective object is reachable through the respective network path from an external network to the cloud environment;
save each object together with the respective network path and the reachability properties in a database; and
determine that an object is exposed in response to detecting that the object is reachable from the external network.