SYSTEM AND METHOD FOR RECURSIVE INSPECTION OF WORKLOADS FROM CONFIGURATION CODE TO PRODUCTION ENVIRONMENTS
개요
발명자
Raaz HERZBERG; Yaniv Joseph OLIVER; Osher HAZAN; Niv Roit BEN DAVID; Ami LUTTWAK; Roy REZNIK
IPC 분류
CPC 분류
A system and method for inspecting multiple instances across cloud computing environments for a cybersecurity issue is presented. The system is configured to: detect a code object in a configuration code file, the code object utilized to deploy a virtual instance in a cloud computing environment; generate in a security graph a code object node representing the code object; generate in the security graph a resource node representing a virtual instance deployed in a first cloud computing environment based on the code object, wherein the resource node is connected to the code object node; detect a cybersecurity issue on the virtual instance; and generate an instruction to inspect a second virtual instance deployed in a second cloud computing environment based on the code object, the second virtual instance represented by a second resource node connected to the code object node.
원문 (중국어)
A system and method for inspecting multiple instances across cloud computing environments for a cybersecurity issue is presented. The system is configured to: detect a code object in a configuration code file, the code object utilized to deploy a virtual instance in a cloud computing environment; generate in a security graph a code object node representing the code object; generate in the security graph a resource node representing a virtual instance deployed in a first cloud computing environment based on the code object, wherein the resource node is connected to the code object node; detect a cybersecurity issue on the virtual instance; and generate an instruction to inspect a second virtual instance deployed in a second cloud computing environment based on the code object, the second virtual instance represented by a second resource node connected to the code object node.