Patent ID: 11943240
Assignee: NORMALYZE, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 14:
15. A computer-implemented method performed by a computing system for streamlined analysis of security posture of a cloud environment, the method comprising:
accessing permissions data and access control data for pairs of compute resources and storage resources in the cloud environment;
tracing network communication paths between the pairs of the compute resources and the storage resources based on the permissions data and the access control data;
accessing sensitivity classification data for objects in the storage resources;
qualifying a subset of the pairs of the compute resources and the storage resources as vulnerable to breach attack based on an evaluation of the permissions data, the access control data, and the sensitivity classification data;
receiving a query specifying a subject vulnerability signature;
in response to the query, identifying a set of the network communication paths that satisfy the subject vulnerability signature; and
constructing a cloud attack surface map that graphically depicts the set of the network communication paths as edges between nodes representing the subset of the pairs of the compute resources and the storage resources.