Sonrai Security Inc.

Dasharath P Chavda

Ben A Wuest

Brad J Peters

Gregory A Davis

William Alexander Bird

Matthew Aaron Rogers Carle

Veranika Hadun

Joshua Luke Laver

Christopher Glen Fredericks

Carter James MacLennan

Willam A Bird

A cloud security control platform and method enforces security controls across multiple cloud environments, services and disparate teams while providing a frictionless 'Permissions on Demand' mechanism for approvals and exceptions. In contrast to the prior art, security is evaluated on a permission by permission basis, with the default being that all permissions are denied and then only given to a particular identity on an as-needed basis. This approach reduces the security risks associated with the vast capabilities available in Public Cloud environments and permits an organization that uses the platform to grant access, approve exceptions and delegate approvals with the appropriate compliance.

Cloud security control platform that enforces scope-based security controls

A network-accessible service provides an enterprise with a view of identity and data activity in the enterprise's cloud accounts. The service enables distinct cloud provider management models to be normalized with centralized analytics and views across large numbers of cloud accounts. Using a domain-specific query language, the system enables rapid interrogation of a complete and centralized data model of all data and identity relationships. The data model also supports a cloud 'least privilege and access' framework. Least privilege is a set of minimum permissions that are associated to a given identity; least access is a minimal set of persons that need to have access to given piece data. The framework maps an identity to one or more actions collected in cloud audit logs, and dynamically-build a compete view of an identity's effective permissions. The resulting least privilege and access policies are then applied natively to a given cloud environment to manage access.

Cloud least identity privilege and data access framework

Growing community of inventors

Fredericton, Canada

Dasharath P Chavda