US 12,309,180 B1
Security remediation
Ilia Shevrin, Ramat Gan (IL); Mickey Hovel, Ashdod (IL); Max Leibovich, Ramla (IL); Oded Margalit, Ramat Gan (IL); Uri Kahana, Givat-Ada (IL); and Joseph Tal, Holon (IL)
Assigned to Citibank, N.A., New York, NY (US)
Filed by CITIBANK, N.A., New York, NY (US)
Filed on May 11, 2022, as Appl. No. 17/741,814.
Application 17/741,814 is a continuation in part of application No. 17/232,607, filed on Apr. 16, 2021, granted, now 11,722,526.
Int. Cl. H04L 29/06 (2006.01); H04L 9/40 (2022.01)
CPC H04L 63/1425 (2013.01) [H04L 63/1416 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system for security conflict remediation, comprising:
a storage device; and
a processor in a network system communicatively coupled to the storage device, wherein the processor executes application code instructions that are stored in the storage device to cause the system to:
configure a formal compliance document comprising one or more remediation actions to correct security conflicts between security policies or security permissions in an identification and access management (“IAM”) system that comprises the security policies or the security permissions;
apply a model checker on an abstract model of the IAM system to identify one or more security conflicts between one or more of the security policies or the security permissions and a different one of the security policies or the security permissions within the IAM system, wherein the abstract model is created by representing features of the IAM system as mathematical formulas;
identify a first remediation action from the one or more remediation actions identified from the formal compliance document based on an identified security conflict between the one or more of the security policies or the security permissions and the different one of the security policies or the security permissions within the IAM system;
execute the first remediation action that modifies one or more security policies or one or more security permissions within the IAM system;
apply the model checker on the abstract model of the IAM system after applying the first remediation action to the one or more security policies or to the one or more security permissions;
determine, in response to applying the model checker after applying the first remediation action, that the first remediation action does not create a second security conflict between the security policies or the security permissions within the IAM system; and
subsequently to determining that the first remediation action does not create the second security conflict, apply the first remediation action to the IAM system.