Risk scoring of cloud permission assignments using supervised machine learning
Techniques for calculating risk scores of entity assignments are discussed herein. The system generates a probability matrix using a collaborative filtering technique such as singular value decomposition. The probability matrix is populated with probability values for each entity representing a probability that, based on the various relationships or associations of that entity with other entities, the entity has been granted an assignment. Risk values are used to provide a weighting value to assignments, separating relatively higher risk assignments from relatively lower risk assignments. The system thereafter calculates a risk score for one or more of the entities using the information in the assignment matrix, the probability matrix, and the risk values. The system can flag or identity one or more entities whose risk scores do not meet various criteria.
1. A system comprising:
one or more processors; and
one or more non-transitory computer-readable media storing computer-executable instructions that, when executed, cause the one or more processors to perform operations comprising:
receiving entity data comprising:
identities of an entity and a plurality of second entities;
a listing of assignments associated with the entity and the plurality of second entities; and
the assignments of the listing of assignments granted to the entity and the plurality of second entities;
generating an assignment matrix based on the entity data;
generating a probability matrix by implementing a collaborative filtering technique on the assignment matrix, wherein the probability matrix comprises values indicating a probability that the entity or the plurality of second entities is granted a particular assignment;
receiving risk values comprising weighting values for the assignments in the listing of assignments, whereas the weighting values are used to differentiate relatively higher level assignments from relatively lower level assignments;
generating a risk score for the entity using the assignment matrix, the probability matrix, and the risk values; and
flagging the entity when the risk score meets a criteria.
2. The system of claim 1 , further comprising computer-executable instructions that, when executed, cause the one or more processors to perform operations comprising generating a recommendation when the risk score meets the criteria.
3. The system of claim 2 , wherein the recommendation comprises an identification of a substitute assignment to reduce the risk score, wherein the substitute assignment provides some functionality of an assignment associated with the risk score.
4. The system of claim 1 , wherein the criteria comprises a risk score that is at or greater than a predetermined value, a risk score that is less than a predetermined value, or a risk score that exceeds a differential value.
5. The system of claim 1 , wherein the computer-executable instructions for generating the assignment matrix comprises updating a previously generated assignment matrix using the entity data.
6. The system of claim 1 , wherein the computer-executable instructions for generating the probability matrix comprises retrieving a previously generated probability matrix.
7. The system of claim 1 , further comprising computer-executable instructions that, when executed, cause the one or more processors to perform operations comprising generating a second risk score for a second entity upon adding the second entity as one of the plurality of second entities.
8. The system of claim 1 , wherein the risk values are received from a user input or from a rules-based model.
9. One or more non-transitory computer-readable media storing instructions executable by one or more processors, wherein the instructions, when executed, cause the one or more processors to perform operations comprising:
receiving entity data to generate a risk score for an entity, the entity data comprising:
identities of the entity and a plurality of second entities;
a listing of assignments associated with the entity and the plurality of second entities; and
an indication of assignments from the listing of assignments granted to the entity and the plurality of second entities;
generating an assignment matrix comprising the entity data;
generating a probability matrix by implementing a collaborative filtering technique on the assignment matrix, wherein the probability matrix comprises values indicating a probability that the entity or the plurality of second entities is granted a particular assignment;
receiving risk values comprising weighting values for the assignments in the listing of assignments, whereas the weighting values are used to differentiate relatively higher level assignments from relatively lower level assignments;
generating a risk score for the entity using the assignment matrix, the probability matrix, and the risk values; and
flagging the entity when the risk score meets a criteria.
10. The one or more non-transitory computer-readable media of claim 9 , further comprising instructions that, when executed, cause the one or more processors to perform operations comprising generating a recommendation when the risk score meets the criteria.
11. The one or more non-transitory computer-readable media of claim 10 , wherein the recommendation comprises an identification of a substitute assignment to reduce the risk score, wherein the substitute assignment provides some functionality of an assignment associated with a risk score.
12. The one or more non-transitory computer-readable media of claim 9 , wherein the criteria comprises a risk score that is at or greater than a predetermined value, a risk score that is less than a predetermined value, or a risk score that exceeds a differential value.
13. The one or more non-transitory computer-readable media of claim 9 , wherein the instructions for generating the assignment matrix comprises updating a previously generated assignment matrix using the entity data.
14. The one or more non-transitory computer-readable media of claim 9 , wherein the instructions for generating the probability matrix comprises retrieving a previously generated probability matrix.
15. The one or more non-transitory computer-readable media of claim 9 , further comprising instructions that, when executed, cause the one or more processors to perform operations comprising generating a second risk score for a second entity upon adding the second entity as one of the plurality of second entities.
16. The one or more non-transitory computer-readable media of claim 9 , further comprising instructions that, when executed, cause the one or more processors to perform operations comprising flagging the entity when the risk score of the entity for an illusory assignment is not an expected value.
17. A computer-implemented method comprising:
receiving entity data to generate a risk score for an entity and a plurality of second entities, the entity data comprising:
identities of the entity and the plurality of second entities;
a listing of assignments associated with the entity and the plurality of second entities; and
an indication of assignments from the listing of assignments granted to the entity and the plurality of second entities; and
generating an assignment matrix comprising the entity data;
generating a probability matrix by implementing a collaborative filtering technique on the assignment matrix, wherein the probability matrix comprises values indicating a probability that the entity or the plurality of second entities is granted a particular assignment;
receiving risk values comprising weighting values for the assignments in the listing of assignments, whereas the weighting values are used to differentiate relatively higher level assignments from relatively lower level assignments;
generating the risk score for the entity using the assignment matrix, the probability matrix, and the risk values; and
flagging the entity when the risk score meets a criteria.
18. The computer-implemented method of claim 17 , further comprising generating a recommendation when the risk score meets the criteria, wherein the recommendation comprises an identification of a substitute assignment to reduce the risk score, wherein the substitute assignment provides some functionality of an assignment associated with a risk score, and wherein the criteria comprises a risk score that is at or greater than a predetermined value, a risk score that is less than a predetermined value, or a risk score that exceeds a differential value.
19. The computer-implemented method of claim 17 , wherein generating the assignment matrix comprises updating a previously generated assignment matrix using the entity data, and wherein generating the probability matrix comprises retrieving a previously generated probability matrix.
20. The computer-implemented method of claim 17 , further comprising flagging the entity when the risk score of the entity for an illusory assignment is not an expected value.