公开(公告)号：US11470159B2

公开(公告)日：2022-10-11

申请号：US17157388

申请日：2021-01-25

Applicant: Cisco Technology, Inc.

Inventor： Jackson Ngoc Ki Pang ,  Ashutosh Kulshreshtha ,  Preethi Narayan ,  Vishal Jaswant Thakkar ,  Aria Rahadian ,  Zhiwen Zhang

IPC: H04L67/133 ,  H04L9/40 ,  H04L67/51

Abstract: The present disclosure provides systems, methods, and computer-readable media for determining an objective measure of breach exposure of Application Programming Interface (API) infrastructure for microservices. In one aspect, a method includes analyzing header information of Application Programming Interface (API) call stacks between microservices; determining, for each API call stack, corresponding security key information based on the header information; determining location information of each of the microservices; and determining a vulnerability score for each of the microservices based on the corresponding security key information and corresponding location information of each of the microservices.

公开(公告)号：US20220070279A1

公开(公告)日：2022-03-03

申请号：US17157388

申请日：2021-01-25

Applicant: Cisco Technology, Inc.

Inventor： Jackson Ngoc Ki Pang ,  Ashutosh Kulshreshtha ,  Preethi Narayan ,  Vishal Jaswant Thakkar ,  Aria Rahadian ,  Zhiwen Zhang

IPC: H04L29/06 ,  H04L29/08

Abstract: The present disclosure provides systems, methods, and computer-readable media for determining an objective measure of breach exposure of Application Programming Interface (API) infrastructure for microservices. In one aspect, a method includes analyzing header information of Application Programming Interface (API) call stacks between microservices; determining, for each API call stack, corresponding security key information based on the header information; determining location information of each of the microservices; and determining a vulnerability score for each of the microservices based on the corresponding security key information and corresponding location information of each of the microservices.