Patent ID: 11962623
Assignee: WIZ, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 8:
9. A system for determining an exposure path of vulnerable objects in a cloud environment comprising:
a processing circuitry; and
a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
identify a plurality of network paths in the cloud environment, wherein each network path includes at least two objects deployed in the cloud environment;
statically analyze each object in each respective network path to determine reachability properties of each object;
analyze the reachability properties determined for each object to determine if the respective object is reachable through the respective network path from an external network to the cloud environment;
save each object together with the respective network path and the reachability properties in a database; and
determine that an object is exposed in response to detecting that the object is reachable from the external network.