US 11,902,354 B2
Cloud intelligence data model and framework
Ben Wuest, Fredericton (CA); William Bird, Fredericton (CA); Brad Peters, Fredericton (CA); and Albert Lockett, Fredericton (CA)
Assigned to Sonrai Security Inc., New York, NY (US)
Filed by Sonrai Security Inc., New York, NY (US)
Filed on Jan. 31, 2023, as Appl. No. 18/103,821.
Application 18/103,821 is a continuation of application No. 16/939,890, filed on Jul. 27, 2020, granted, now 11,570,231, issued on Jan. 31, 2023.
Application 16/939,890 is a continuation of application No. 16/505,038, filed on Jul. 8, 2019, granted, now 10,728,307, issued on Jul. 28, 2020.
Claims priority of provisional application 62/742,747, filed on Oct. 8, 2018.
Prior Publication US 2023/0179649 A1, Jun. 8, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 67/50 (2022.01); H04L 67/306 (2022.01); G06N 5/025 (2023.01); H04L 67/025 (2022.01); H04L 67/1097 (2022.01); G06F 16/2457 (2019.01); G06F 11/34 (2006.01); G06N 5/00 (2023.01); H04L 67/51 (2022.01); H04L 67/75 (2022.01)
CPC H04L 67/025 (2013.01) [G06F 11/34 (2013.01); G06F 16/2457 (2019.01); G06N 5/00 (2013.01); G06N 5/025 (2013.01); H04L 67/1097 (2013.01); H04L 67/306 (2013.01); H04L 67/51 (2022.05); H04L 67/535 (2022.05); H04L 67/75 (2022.05)] 9 Claims
OG exemplary drawing
 
1. A multi-tenant shared infrastructure-as-as-service for monitoring a set of cloud deployments associated with a tenant associated with an enterprise, comprising:
receiving a data set generated by execution within a cloud deployment of a reporting code component, the reporting code component having been generated from a classification model, the data set comprising identities of subscriber users and associated permissions of the subscriber users with respect to resources in the cloud deployment;
generating a knowledge graph that embeds data from the data set and the classification model, the knowledge graph instantiating, collectively, the associated permissions of the subscriber users for the set of cloud deployments; and
responsive to receipt of an information request structured according to a query language, the query language being generated at least in part from a schema associated with the classification model, querying the knowledge graph and returning a response to the information request.