公开(公告)号：US11956239B2

公开(公告)日：2024-04-09

申请号：US17496020

申请日：2021-10-07

申请人： MICROSOFT TECHNOLOGY LICENSING, LLC

发明人： Idan Hen ,  Aharon Michaels ,  Dotan Patrich ,  Josef Weizman ,  Amit Magen

IPC分类号： H04L29/06 ,  G06N20/00 ,  H04L9/40

CPC分类号： H04L63/101 ,  G06N20/00 ,  H04L63/105 ,  H04L63/20

摘要： Technologies are shown for detection of identity misconfiguration that involve collecting identity/role binding and role/access rules data from multiple clusters supported by a computing resource system. Access rules for identities are extracted from the collected data and an access rule prediction model created to predict access rules for identities. An identity definition request for a tenant is received having a requested identity and a role assigned to the identity. A set of access rules is obtained for the role assigned to the identity and a predicted set of access rules is obtained for the requested identity from the prediction model. The access rules for the requested role are compared to the predicted set of access rules and a misconfiguration alert generated when there is a difference between the set of access rules for the requested role and the predicted set of access rules for the requested identity.