Patent ID: 9280669
Filing Date: 2016-03-08
CPC Classification: G06F

Claim Text:
1. A security analysis system, comprising a processor and a memory coupled to the processor which is configured to be capable of executing programmed instructions comprising and stored in the memory to: receive an identifier of an application hosted in a cloud environment, a list of cloud service providers in the cloud environment, and a set of security controls; identify a set of security metrics and assign at least a subset of the security metrics to each of the security controls, wherein each of the security controls is defined for the application based on a type of the application and corresponds with an enterprise level security policy of an organization providing the application; retrieve a set of values for each of the security metrics from one or more systems of at least one of the cloud service providers in the cloud environment; generate a security control index for each of the security controls based on the retrieved values for the assigned at least a subset of security metrics, wherein the security control index for each of the security controls is determined as  where j varies from 1 to k, k is a number of the security metrics in the assigned at least a subset of security metrics, M generate and output an application security index for the application based on an average of a weighted sum of the security control indices.