Identifying An Attack Surface Of A Cloud Deployment
Identifying an attack surface of a cloud deployment, including: identifying a security threat of a cloud deployment; gathering, from one or more components in a software development pipeline, information associated with the cloud deployment; identifying, based on the information associated with the cloud deployment, a portion of code enabling the security threat; and generating the alert based on the security threat and the identified portion of code.
1 . A method of identifying an attack surface of a cloud deployment, the method comprising:
identifying a security threat of a cloud deployment;
gathering, from one or more components in a software development pipeline, information associated with the cloud deployment;
identifying, based on the information associated with the cloud deployment, a portion of code enabling the security threat; and
generating an alert based on the security threat and the identified portion of code.
2 . The method of claim 1 , wherein identifying the portion of code comprises identifying a repository storing the portion of code, and wherein the alert indicates the identified repository.
3 . The method of claim 1 , wherein identifying the portion of code comprises identifying a particular one or more lines of code enabling the security threat, and wherein the alert indicates the particular one or more lines of code.
4 . The method of claim 1 , wherein identifying the portion of code comprises identifying a user that added the portion of code to the cloud deployment, and wherein the alert indicates the user.
5 . The method of claim 1 , wherein gathering the information associated with the cloud deployment comprises gathering runtime information associated with the cloud deployment, and wherein the alert identifies at least a portion of the runtime information for the cloud deployment.
6 . The method of claim 1 , wherein the security threat comprises a detected vulnerability.
7 . The method of claim 1 , wherein the security threat comprises an identified configuration drift.
8 . The method of claim 1 , wherein the security threat comprises a detected risk level.
9 . The method of claim 1 , wherein the security threat comprises a detected anomaly.
10 . The method of claim 1 , further comprising presenting a user interface comprising a selectable element that, when selected, modifies the identified portion of code to remediate the security threat.
11 . A computer program product for identifying an attack surface of a cloud deployment, the computer program product disposed on a computer readable medium, the computer program product including computer program instructions configurable to carry out the steps of:
identifying a security threat of a cloud deployment;
gathering, from one or more components in a software development pipeline, information associated with the cloud deployment;
identifying, based on the information associated with the cloud deployment, a portion of code enabling the security threat; and
generating an alert based on the security threat and the identified portion of code.
12 . The computer program product of claim 11 , wherein identifying the portion of code comprises identifying a repository storing the portion of code, and wherein the alert indicates the identified repository.
13 . The computer program product of claim 11 , wherein identifying the portion of code comprises identifying a particular one or more lines of code enabling the security threat, and wherein the alert indicates the particular one or more lines of code.
14 . The computer program product of claim 11 , wherein identifying the portion of code comprises identifying a user that added the portion of code to the cloud deployment, and wherein the alert indicates the user.
15 . The computer program product of claim 11 , wherein gathering the information associated with the cloud deployment comprises gathering runtime information associated with the cloud deployment, and wherein the alert identifies at least a portion of the runtime information for the cloud deployment.
16 . The computer program product of claim 11 , wherein the security threat comprises a detected vulnerability.
17 . The computer program product of claim 11 , wherein the security threat comprises an identified configuration drift.
18 . The computer program product of claim 11 , wherein the security threat comprises a risk level.
19 . The computer program product of claim 11 , wherein the steps further comprise presenting a user interface comprising a selectable element that, when selected, modifies the identified portion of code to remediate the security threat.
20 . The computer program product of claim 11 further comprising computer program instructions configurable to carry out the step of presenting a polygraph.