Zscaler, Inc.

Roi Inbar

Hila Paz Herszfang

Systems and methods for detecting abnormal permissions in a cloud environment include obtaining data associated with a cloud environment; partitioning the data into a plurality of groups and windows, wherein each of the windows includes one or more groups; determining one or more groups within a window having a similarity; and identifying one or more groups as having abnormal permissions based on the similarity. Based on a similarity score being above a threshold, the systems can be adapted to identify the differences, i.e., the one or more extra permissions in one of the groups, and automatically remove these permissions.

Systems and methods for detecting abnormal permissions in a cloud environment

Systems and methods for session similarity identification include receiving historical sessions for one of a plurality of machines operating in a cloud-based system. The methods can include receiving and manage sessions from any number of machines in the cloud-based system. The system then receives monitored sessions for the machine or plurality of machines, and calculates a similarity between the received historical sessions and the received monitored sessions. After calculating the similarity, the system defines a risk score based on the similarity.

Growing community of inventors

Tel Aviv, Israel

Roi Inbar