Fortinet, Inc.

Nolan K Karpinski

Yijou Chen

Theodore M Reed

Xiaofei Guo

Sowmya A Karmali

Matti A Vanninen

John Payyappillil John

Carsten Varming

Christien R Rioux

Mary L Singh

Nicholas W Mcnutt

Christopher Hall

An illustrative method includes identifying, based on static workload data associated with a compute environment, one or more attack paths from a network to one or more datasets associated with an entity, accessing runtime workload data associated with the compute environment, and performing, based on the runtime workload data, a risk mitigation operation associated with the one or more attack paths.

Attack path risk mitigation by a data platform using static and runtime data

An illustrative method includes scanning a compute environment associated with an entity and identifying one or more attack paths from a network to one or more datasets associated with the entity. The one or more attack paths each include a series of risk artifacts within the compute environment that can be exploited by an attacker to access the one or more datasets. The method further includes generating one or more attack path risk scores associated with the one or more attack paths and indicative of one or more levels of risk that the one or more attack paths could be exploited to access the one or more datasets. A risk mitigation operation associated with the one or more attack paths is performed based on the one or more attack path risk scores.

Attack path risk mitigation by a data platform

An illustrative method for operating an agent configuration may include providing an unprivileged agentless workload scanning configuration to collect non-runtime workload data associated with a workload deployed within a cloud environment, determining one or more properties of the workload based on the non-runtime workload data, and performing an operation with respect to a privileged agent configuration deployed within the cloud environment and configured to collect runtime workload data associated with the workload. Likewise, an illustrative method for operating an agentless configuration may include providing a privileged agent configuration to collect runtime workload data associated with a workload deployed within a cloud environment, determining one or more properties of the workload based on the runtime workload data, and performing an operation with respect to an unprivileged agentless scanning configuration deployed within the cloud environment and configured to collect non-runtime workload data associated with the workload.

Interdependence of agentless and agent-based operations by way of a data platform

Growing community of inventors

San Francisco, CA, United States of America

Nolan K Karpinski