公开(公告)号：US20240289470A1

公开(公告)日：2024-08-29

申请号：US18173609

申请日：2023-02-23

Applicant: Snowflake Inc.

Inventor： Andrew Clauson ,  Martin S. Heyder ,  Shiva Dutt Paladugu ,  Falguni Sonawala ,  Cameron Tekiyeh

IPC: G06F21/60 ,  G06F21/62

CPC classification number: G06F21/604 ,  G06F21/6227 ,  G06F2221/2113 ,  G06F2221/2141

Abstract: Provided herein are systems and methods for configuring user access review (UAR). A system includes at least one hardware processor coupled to a memory and configured to retrieve user data associated with a plurality of users of a database system. The user data includes current access privileges and a role of a plurality of roles assigned to each user of the plurality of users. The policy data is associated with the plurality of users and includes a list of allowed access privileges for each of the plurality of roles. A mismatch between the current access privileges of a user of the plurality of users and the allowed access privileges associated with the role of the user is detected. A remediation action is performed to adjust the current access privileges of the user based on the detected mismatch. A notification is generated to confirm the remediation action is performed.

公开(公告)号：US20240362340A1

公开(公告)日：2024-10-31

申请号：US18309628

申请日：2023-04-28

Applicant: Snowflake Inc.

Inventor： Ankur Agrawal ,  Iulia Ion ,  Shiva Dutt Paladugu ,  Cameron Tekiyeh ,  Sujay C. Yantrapragada

IPC: G06F21/57

CPC classification number: G06F21/577 ,  G06F2221/034

Abstract: A system for providing real-time automated security scoring for a data platform. The system collects application log data and threat intelligence data in a variety of formats and normalizes the application log data and threat intelligence data. A risk scoring engine uses the normalized application log data, the normalized threat intelligence data, and a risk mapping matrix to generate security score data. Security risk assessment data including the security score data is stored in a shared database so that consumers of the security scoring data can access the security risk assessment data in real-time.