System and method for analyzing network objects in a cloud environment
A method and system for providing textual insights on objects deployed in a cloud environment are provided. The method includes collecting object data on objects deployed in the cloud environment, wherein objects are deployed and operable at different layers of the cloud environment; identifying objects deployed in the cloud environment; constructing a visual representation of the cloud environment, including the identified objects and their relationships; and generating textual insights on the identified objects and their relationships using natural language processing.
1. A method for filtering network insights from vulnerable network objects having cyber-threats, comprising:
collecting object data on objects deployed in a cloud environment, wherein objects are deployed and operable at different layers of the cloud environment;
identifying objects deployed in the cloud environment;
constructing a representation of the cloud environment, including the identified objects and relationships of the identified objects;
generating network insights on the identified objects and the relationships of the identified objects, wherein network insights are natural-language representations of aspects of the constructed representation of the cloud environment;
tagging the identified objects in the representation for which the insight was generated; and
filtering the network insights based on an insight indicating exposure from an external network.
2. The method of claim 1 , further comprising:
generating an alert based on the network insight.
3. The method of claim 2 , further comprising:
filtering the alert based on the insight indicating exposure of the external network.
4. The method of claim 1 , further comprising:
generating a network graph from the representation of the cloud environment.
5. The method of claim 4 , wherein the network graph includes any one of: a table, a chart, a non-visual data format, a list of objects, and any combination thereof.
6. The method of claim 1 , further comprising:
detecting an anomaly based on the generated network insights.
7. The method of claim 6 , further comprising:
generating an alert based on the detected anomaly.
8. The method of claim 1 , further comprising:
determining that a network object is vulnerable to a cyber-threat based on the insight indicating exposure from an external network.
9. The method of claim 8 , further comprising:
filtering the network insights further based on an insight indicating a cyber-threat vulnerability.
10. A non-transitory computer-readable medium storing a set of instructions for filtering network insights from vulnerable network objects having cyber-threats, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a device, cause the device to:
collect object data on objects deployed in a cloud environment, wherein objects are deployed and operable at different layers of the cloud environment;
identify objects deployed in the cloud environment;
construct a representation of the cloud environment, including the identified objects and relationships of the identified objects;
generate network insights on the identified objects and the relationships of the identified objects, wherein network insights are natural-language representations of aspects of the constructed representation of the cloud environment;
tag the identified objects in the representation for which the insight was generated; and
filter the network insights based on an insight indicating exposure from an external network.
11. A system for filtering network insights from vulnerable network objects having cyber-threats comprising:
a processing circuitry; and
a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
collect object data on objects deployed in a cloud environment, wherein objects are deployed and operable at different layers of the cloud environment;
identify objects deployed in the cloud environment;
construct a representation of the cloud environment, including the identified objects and relationships of the identified objects;
generate network insights on the identified objects and the relationships of the identified objects, wherein network insights are natural-language representations of aspects of the constructed representation of the cloud environment;
tag the identified objects in the representation for which the insight was generated; and
filter the network insights based on an insight indicating exposure from an external network.
12. The system of claim 11 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
generate an alert based on the network insight.
13. The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
filter the alert based on the insight indicating exposure of the external network.
14. The system of claim 11 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
generate a network graph from the representation of the cloud environment.
15. The system of claim 14 , wherein the network graph includes any one of:
a table, a chart, a non-visual data format, a list of objects, and any combination thereof.
16. The system of claim 11 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
detect an anomaly based on the generated network insights.
17. The system of claim 16 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
generate an alert based on the detected anomaly.
18. The system of claim 11 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
determine that a network object is vulnerable to a cyber-threat based on the insight indicating exposure from an external network.
19. The system of claim 18 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
filter the network insights further based on an insight indicating a cyber-threat vulnerability.