Skyhigh Networks, Inc.

Hewlett-packard Development Company, L.p.

Skyhigh Security LLC

Hewlett-packard Company

Cisco Technology, Inc.

Oracle International Corporation

Sekhar R Sarukkai

Rajiv Gupta

Kaushik Narayan

Prasad Raghavendra Somasamudram

Dejan Curcic

Sandeep Chandana

Santosh Raghuram Kumar

Satyanarayana Vummidi

Kannan Govindarajan

Vinay Gupta

Rama Taraniganty

Madhavi Kavathekar

Shankar Umamaheshwaran

Snehal Chennuru

Alan Hersh Karp

Ravi Hingarajiya

Arindam Banerji

Shamik Sharma

Surendrakumar Viswanathan

Vitali Fridman

Pradeep Kumar Reddy Mangalapuri

Glenn Mulvaney

Vikram Jaiswal

Guruprasad Shenoy

Shamik Shama

Chapman Seto

Didier Rene Guzzoni

Zheng Zhang

Amit Agrawal

Akhil Sahai

Paul Grubbs

Raghavendra Prasad

Sriram Ramani

Ramesh Sarukkai

Christopher M Guidroz

Syed Ummar Farooqh

Wooyoung Kim

Receiving configuration settings (CSs) from a resource using an API; determining a resource risk score (RERS), a first tactic risk score (TARS), a first plurality of technique risk scores (TERSs), a second TARS, and a second TERSs, wherein the RERS is based on the first TARS and the second TARS, wherein the first TARS is based on the first TERSs, wherein the second TARS is based on the second TERSs, wherein each of the first TERSs is based on a subset of a set of policy scores (SPS), wherein each of the second TERSs is based on a subset of the SPS, and wherein each of the SPS is based on compliance of the CSs with a setting; and selecting a most-important technique (MIT) based on the first TARS, the second TARS, and one of the first TERSs and the second TERSs, and remediating a CS corresponding to the MIT.

Systems, methods, and media for monitoring cloud configuration settings

A cloud service account management method identifies unauthorized or unmanaged accounts making administration console access or API access at a cloud computing service and triggers a work flow to place the accounts under management. In one embodiment, the user device is directed to a registration portal to provide access credentials of the unauthorized account. The loud service account management method uses the access credentials to retrieve a list of account users associated with the account. Once the accounts are made managed, the cloud service account management method can monitor the activities of the account, including all of the account users, and can apply compliance or security policies to the managed accounts.

Cloud service account management method

A cloud security system and method implements cloud activity threat detection using analysis of cloud usage user behavior. In particular, the cloud security system and method implements threat detection for users, cloud service providers, or tenants (enterprises) of the cloud security system who are new or unknown to the cloud security system and therefore lacking sufficient cloud activity data to generate an accurate behavior model for effective threat detection. In accordance with embodiments of the present invention, the cloud security system and method performs user behavior analysis to generate generalized user behavior models for user groups, where each user group includes users with similar cloud usage behavior. The user behavior models of the user groups are assigned to users with sparse cloud activity data. In this manner, the cloud security system and method of the present invention ensures effective threat detection by using accurate and reliable user behavior models.

Cloud activity threat detection for sparse and limited user behavior data

A method of assessing a risk level of an enterprise using cloud-based services from one or more cloud service providers includes assessing provider risk scores associated with the one or more cloud service providers; assessing cloud service usage behavior and pattern of the enterprise; and generating a risk score for the enterprise based on the provider risk scores and on the cloud service usage behavior and pattern of the enterprise. The risk score is indicative of the risk of the enterprise relating to the use of the cloud-based services from the one or more cloud service providers.

Cloud service usage risk assessment

A service action category based cloud security system and method implement cloud security by categorizing service actions of cloud service providers into a set of service action categories. The service action categorization is performed agnostic to the applications or functions provided by the cloud service providers and also agnostic to the cloud service providers. With the service actions of cloud service providers thus categorized, cloud security monitoring and threat detection can be performed based on service action categories. Thus, cloud security can be implemented without requiring knowledge of the applications supported by the cloud service providers and without knowing all of the individual service actions supported by the cloud service providers.

Cloud security system implementing service action categorization

A cloud security method implement web security at the application level by monitoring network traffic and detecting cloud activities related to web applications, and then classifying the detected cloud activities to map certain security-related cloud activities into activity categories to enable security policy to be applied. The application-level cloud security method enables policy enforcement rules to be established for cloud activity categories. The security policies are then applied based on activity categories.

Cloud security policy enforcement for custom web applications

Mechanisms (such as systems, methods, and media) for protecting a client device from an insecure cloud-based storage container stored on a server are provided, the mechanisms comprising: determining that content accessible by the client device is hosted in a storage container on the server; sending a message to the server to determine what security provisions are in place for the storage container; determining that the storage container is not secure; and blocking access by the client device to the storage container.

Systems, methods, and media for protecting client devices from insecure cloud-based storage containers

A cloud service account management method identifies unauthorized or unmanaged accounts making administration console access or API access at a cloud computing service and triggers a work flow to place the accounts under management. In one embodiment, the user device is directed to a registration portal to provide credentials of the unauthorized account. Once the accounts are made managed, the cloud service account management method can monitor the activities of the accounts and can apply compliance or security policies to the managed accounts.

Cloud service account management

Growing community of inventors

Sunnyvale, CA, United States of America

Sekhar R Sarukkai