US 11,936,678 B2
System and techniques for inferring a threat model in a cloud-native environment
Olgierd Stanislaw Pieczul, Dublin (IE); and Junaid Khan, North Bend, WA (US)
Assigned to Oracle International Corporation, Redwood Shores, CA (US)
Filed by Oracle International Corporation, Redwood Shores, CA (US)
Filed on Jan. 6, 2022, as Appl. No. 17/569,954.
Prior Publication US 2023/0216876 A1, Jul. 6, 2023
Int. Cl. H04L 9/40 (2022.01); G06F 16/25 (2019.01); H04L 41/0853 (2022.01); H04L 41/14 (2022.01); H04L 41/22 (2022.01); H04L 45/00 (2022.01); H04L 67/1036 (2022.01); H04L 67/51 (2022.01)
CPC H04L 63/1433 (2013.01) [H04L 41/0853 (2013.01); H04L 41/145 (2013.01); H04L 41/22 (2013.01); H04L 67/1036 (2013.01); H04L 67/51 (2022.05)] 27 Claims
OG exemplary drawing
 
1. A method, comprising:
generating, via a threat modeling engine, a first threat model comprising (a) a first set of one or more threats associated with a first environment model representing a first cloud infrastructure comprising a plurality of services and a plurality of resources, and (b) a first set of one or more potential mitigation strategies comprising at least a first mitigation to mitigate at least a first threat of the first set of one or more threats;
prior to implementing a first recommendation corresponding to the first mitigation:
generating, via the threat modeling engine, a second threat model at least by propagating the first set of one or more potential mitigation strategies through the first environment model, wherein the second threat model comprises (a) a second set of one or more threats associated with the first environment model, wherein the second set of one or more threats comprises at least a second threat predicted based on the first mitigation, and (b) a second set of one or more potential mitigation strategies comprising at least a second mitigation to mitigate at least the second threat of the second set of one or more threats;
generating, via the threat modeling engine, a plurality of recommendations for the first cloud infrastructure, wherein the plurality of recommendations comprise (a) the first recommendation corresponding to the first mitigation, and (b) a second recommendation corresponding to the second mitigation,
wherein the first cloud infrastructure is modified at least by implementing the first recommendation and the second recommendation.