Salesforce, Inc.

Neha Kerkar

Prabhat Singh

Aditya Suresh Kumar

Amit Chakrabarty

A computer-implemented method for monitoring and remediating security drift in a public cloud network is disclosed. The security drift event includes an unintended change to existing security controls effected through an unauthorized deployment channel, performed by an unauthorized user. The method includes providing a cloud server application including a number of cloud client accounts, and deploying the cloud client accounts in client account clusters. The client account clusters include a master account that includes a drift detection component and a number of service accounts including serverless application components. The method further includes instantiating cloud infrastructure resources in the service accounts, and detecting a security drift event in the client account cluster, by the drift detection components. The method further includes, responsive to the security drift event, obtaining one or more remediation rules, and implementing a drift remediation strategy based on the one or more remediation rules, by a rules engine.

Growing community of inventors

Bellevue, WA, United States of America

Neha Kerkar