Palo Alto Networks, Inc.

Varun Badhwar

Wayne Jens Jensen

Chandra Biksheswaran Mouleeswaran

Gaurav Kumar

Angad Abhay Mehata

A resource database which stores structured data describing resources from a diverse array of origins (e.g., an application or cloud environment) is built and maintained to support querying, policy enforcement, and remediation of resources from any origin. Structured data representing resources are obtained from any origin for insertion and categorized based on their type and/or origin. Resources within a category have a shared set of potential object paths as defined by the hierarchical tree structure of their structured data. Resources may be correlated across categories based on having values at different object paths in common. Queries and rules/policies can thus reference resources of any category and also resources across different categories based on correlations between the resources, thereby extending rule/policy enforcement and incident remediation across multiple different origins of resources.

Domain-independent resource security and management

A security appliance is used to evaluate a software defined infrastructure. The security appliance includes a data ingestion and query engine. The data ingestion and query engine are configured to retrieve configuration and operational information associated with the software defined infrastructure, extract selective information from the retrieved configuration and operational information, and store extracted selective information in a plurality of data store. A policy compliance engine is configured to evaluate selectively stored information for compliance to a policy and generate a report based on the evaluation. The configuration and operational information include information related to asset configuration, audit event indicative of an initiation of an infrastructure related activity for the software defined infrastructure and network communication associated with the software defined infrastructure.

Security appliance to monitor networked computing environment

A system and method to evaluate a software defined infrastructure is disclosed. A security appliance is used to evaluate the software defined infrastructure. The security appliance includes a data ingestion and query engine. The data ingestion and query engine is configured to retrieve configuration and operational information associated with the software defined infrastructure, extract selective information from the retrieved configuration and operational information, and store extracted selective information in a plurality of data store. A policy compliance engine is configured to evaluate selectively stored information for compliance to a policy and generate a report based on the evaluation.

Growing community of inventors

Union City, CA, United States of America

Varun Badhwar