US 11,729,219 B2
Cloud security system implementing service action categorization
Sandeep Chandana, Fremont, CA (US); and Sekhar Sarukkai, Cupertino, CA (US)
Assigned to Skyhigh Security LLC, Plano, TX (US)
Filed by Skyhigh Security LLC, Plano, TX (US)
Filed on Apr. 12, 2021, as Appl. No. 17/228,547.
Application 17/228,547 is a continuation of application No. 15/789,658, filed on Oct. 20, 2017, granted, now 10,999,325.
Prior Publication US 2021/0234902 A1, Jul. 29, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 29/06 (2006.01); H04L 9/40 (2022.01)
CPC H04L 63/20 (2013.01) [H04L 63/1425 (2013.01); H04L 63/205 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A method of implementing cloud security in an enterprise, the method comprising:
accessing, using a hardware processor, mapping data for service actions to a first set of service action categories, wherein each of the first set of service action categories describes a permitted and intended function that is performed by each of a plurality of service actions in the service action category;
identifying, using the processor, an uncategorized service action associated with a first cloud service provider in cloud activity data associated with the enterprise;
performing, using the processor, categorization of the uncategorized service action using at least one contextual categorization prediction method to map the uncategorized service action to a service action category in the first set of service action categories;
evaluating cloud security risk of cloud activities based on the first set of service action categories;
updating the mapping data with the service action category of the uncategorized service action;
detecting cloud security threats using the first set of service action categories; and
applying a security enforcement policy to cloud activities of the enterprise based on the first set of service action categories.