Patent ID: 9591016
Date: 2017-03-07
CPC Classifications: H04L

Claim:
1. A method for assessing security risks associated with a cloud application to which one or more connected applications are coupled, comprising: configuring a security risk assessment application to function as a connected application to the cloud application, wherein a connected application is an application that has been granted access to the cloud application with one or more privileges or permissions to collect data and manage the cloud application; collecting, by the security risk assessment application, first data associated with one or more accounts, and second data associated with the one or more connected applications coupled to the cloud application, wherein at least one account is an identity and access management (IAM) account that is an entity that includes a set of parameters defining application-specific attributes of a principal; generating, by the security risk assessment application, multiple data objects of a same type, wherein each account is represented by one of the multiple data objects, and wherein each connected application is represented by one of the multiple data objects, wherein a data object that represents an account is populated with the first data, wherein a data object that represents a connected application is populated with the second data; and applying a risk assessment to a particular data object to assess a security risk associated with the cloud application.