Salesforce, Inc.

Aditya Suresh Kumar

Prabhat Singh

Jose Lejin P J

Varun Kulkarni Somashekhar

Megha Dixit

Praveenkumar Sowpati

Gianstefano Monni

Arthur Jones

Darragh Connaughton

Ashwin Shroff

Vamshi Karnati

Amit Chakrabarty

Dheeraj Kakkar

Neha Kerkar

A computer-implemented method for monitoring and remediating security drift in a public cloud network is disclosed. The security drift event includes an unintended change to existing security controls effected through an unauthorized deployment channel, performed by an unauthorized user. The method includes providing a cloud server application including a number of cloud client accounts, and deploying the cloud client accounts in client account clusters. The client account clusters include a master account that includes a drift detection component and a number of service accounts including serverless application components. The method further includes instantiating cloud infrastructure resources in the service accounts, and detecting a security drift event in the client account cluster, by the drift detection components. The method further includes, responsive to the security drift event, obtaining one or more remediation rules, and implementing a drift remediation strategy based on the one or more remediation rules, by a rules engine.

Monitoring and remediation of security drift events in a public cloud network

Methods, systems, and devices for data processing in a computing system are described. The computing system may receive a notification of an update to network security objects hosted in diverse substrates within the computing system. The computing system may retrieve a network security policy for a service instance impacted by the update. The computing system may update the network security policy for the service instance according to a network security configuration of the hosting substrate. The computing system may translate the updated network security policy into access control lists (ACLs) for network entities managing communications between service instances within the computing system. The computing system may store the ACLs in respective data repositories that are accessible to the network entities. The computing system may transmit a notification that the ACLs are available for deployment, thereby causing the network entities to retrieve the ACLs from the respective data repositories.

Systems and methods for automatically rendering and deploying network security policies

Growing community of inventors

San Francisco, CA, United States of America

Aditya Suresh Kumar