| CPC H04L 63/10 (2013.01) [G06N 5/04 (2013.01); G06N 20/00 (2019.01); H04L 9/3247 (2013.01); H04L 63/20 (2013.01)] | 20 Claims |

|
1. A method comprising:
determining components of a serverless application;
learning intended behavior of the serverless application, wherein learning intended behavior of the serverless application comprises determining a set of one or more usage flows among the components of the serverless application; and
creating a set of one or more security policies to restrict behavior of the serverless application to the intended behavior, wherein creating the set of one or more security policies is based, at least in part, on the set of one or more usage flows.
|