Patent ID: 11882018
Assignee: SAMSUNG SDS CO., LTD.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. An apparatus for analyzing a network, the apparatus comprising:
one or more processors; and
memory storing instructions configured to cause the one or more processors to:
receive, from a cloud service, information on resources included in the cloud service and information on a network environment of the resources;
generate a network topology of the cloud service by using the information on the resources and the information on the network environment; and
determine, from the network topology, communication possible paths of the respective resources and communication allow policies in the respective communication possible paths, wherein each communication possible path indicates a range of destination IPs and a corresponding port for which communication is determined to be possible from a corresponding one of the resources according to an intersection of a firewall analysis of and a routing table analysis, wherein the firewall analysis is based on a firewall in a communication path of the resource and the routing table analysis is based on a routing table of a router in the communication path of the resource.