The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Dec. 09, 2025

Filed:

Jul. 28, 2023
Applicant:

Wiz, Inc., New York, NY (US);

Inventors:

Itamar Gilad, Tel Aviv, IL;

Aviel Fogel, Tel Aviv, IL;

Udi Reitblat, Tel Aviv, IL;

Alon Schindel, Tel Aviv, IL;

Ami Luttwak, Binyamina, IL;

Roy Reznik, Tel Aviv, IL;

Yinon Costica, Tel Aviv, IL;

Assignee:

Wiz, Inc., New York, NY (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/40 (2022.01); G06F 21/53 (2013.01); G06F 21/55 (2013.01);
U.S. Cl.
CPC ...
H04L 63/1416 (2013.01); G06F 21/53 (2013.01); G06F 21/554 (2013.01); H04L 63/1425 (2013.01); G06F 2221/032 (2013.01);
Abstract

A system and method for detecting privilege escalation on a resource deployed in a computing environment is disclosed. The method includes: configuring the resource to deploy thereon a sensor, the sensor configured to listen on a data link layer of the resource for an event; receiving from the sensor a permission-based event based on a first actor, the permission-based event indicating a first permission set of the first actor; querying a database to detect a second permission set of the first actor; detecting that the first permission set includes a permission which is not in the second permission set; determining that the resource is involved in a privilege escalation event in response to detecting that the first permission set includes a permission which is not in the second permission set; and initiating a mitigation action in response to the determined privilege escalation event.


Find Patent Forward Citations

Loading…