Security vulnerability assessment for users of a cloud computing environment

1. A method comprising:

receiving, by a processing device, a request to associate a user with a cloud computing environment, wherein the cloud computing environment comprises one or more resource categories available to the user;

generating a security profile of the user, wherein the security profile comprises an attribute associated with usage activity by the user of a resource category of the one or more resource categories;

monitoring the usage activity of the resource category by the user in view of the attribute of the security profile;

determining, by the processing device, a security vulnerability value associated with the user in view of the usage activity of the resource category, wherein the security vulnerability value reflects a probability of a resource selected from the resource category by the user being associated with a security exploit; and

responsive to determining that the security vulnerability value satisfies a threshold condition, executing a security audit operation on the security profile.

2. The method of claim 1 , wherein the one or more resource categories comprises at least one of a file resource category, an application resource category, a security policy resource category, or a system configuration resource category.

3. The method of claim 1 , wherein determining the security vulnerability value comprises:

determining a first probability of selecting a particular resource from the resource category in view of the usage activity of the resource category for the user;

determining a second probability that the particular resource is associated with the security exploit in view of historical data for the cloud computing environment; and

determining a first resource vulnerability value for the resource category in view of the first probability and the second probability.

4. The method of claim 3 , wherein the security profile for the user further comprises a second attribute associated with usage activity of a second resource category of the one or more resource categories, and wherein determining the security vulnerability value further comprises:

determining a third probability of selecting another particular resource from the second resource category in view of usage activity of the second resource category for the user;

determining a fourth probability that the another particular resource is associated with another security exploit in view of the historical data for the cloud computing environment;

determining a second resource vulnerability value for the second resource category in view of the third probability and the fourth probability; and

determining the security vulnerability value in view of the first resource vulnerability value and the second resource vulnerability value.

5. The method of claim 1 , further comprising:

identifying a plurality of additional users of the cloud computing environment;

selecting a set of additional security profiles associated with the plurality of additional users;

determining a set of additional security vulnerability values, wherein each additional security vulnerability values in the set of additional security vulnerability values is associated with an additional security profile from the set of additional security profiles; and

determining the threshold condition in view of the set of additional security vulnerability values.

6. The method of claim 1 , wherein executing the security audit operation comprises:

sending a notification to an administrator console that indicates that the user is vulnerable to a security exploit.

7. The method of claim 1 , wherein executing the security audit operation comprises:

determining an access privilege level of the resource category for the user; and

modifying the access privilege level of the resource category for the user in view of the security vulnerability value.

8. A computing apparatus comprising:

a memory; and

a processing device, operatively coupled to the memory, to:

receive a request to associate a user with a cloud computing environment, wherein the cloud computing environment comprises one or more resource categories available to the user;

generate a security profile of the user, wherein the security profile comprises an attribute associated with usage activity by the user of a resource category of the one or more resource categories;

monitor the usage activity of the resource category by the user in view of the attribute of the security profile;

determine a security vulnerability value associated with the user in view of the usage activity of the resource category, wherein the security vulnerability value reflects a probability of a resource selected from the resource category by the user being associated with a security exploit; and

execute a security audit operation on the security profile in view of the security vulnerability value.

9. The computing apparatus of claim 8 , wherein the one or more resource categories comprises at least one of a file resource category, an application resource category, a security policy resource category, or a system configuration resource category.

10. The computing apparatus of claim 8 , wherein to determine the security vulnerability value, the processing device is further to:

determine a first probability of selecting a particular resource from the resource category in view of the usage activity of the resource category for the user;

determine a second probability that the particular resource is associated with the security exploit in view of historical data for the cloud computing environment; and

determine a first resource vulnerability value for the resource category in view of the first probability and the second probability.

11. The computing apparatus of claim 10 , wherein the security profile for the user further comprises a second attribute associated with usage activity of a second resource category of the one or more resource categories, and wherein to determine the security vulnerability value, the processing device is further to:

determine a third probability of selecting another particular resource from the second resource category in view of usage activity of the second resource category for the user;

determine a fourth probability that the another particular resource is associated with another security exploit in view of the historical data for the cloud computing environment;

determine a second resource vulnerability value for the second resource category in view of the third probability and the fourth probability; and

determine the security vulnerability value in view of the first resource vulnerability value and the second vulnerability value.

12. The computing apparatus of claim 8 , wherein the processing device is further to:

identify a plurality of additional users of the cloud computing environment;

select a set of additional security profiles associated with the plurality of additional users;

determine a set of additional security vulnerability values, wherein each additional security vulnerability values in the set of additional security vulnerability values is associated with an additional security profile from the set of additional security profiles;

determine a threshold condition in view of the set of additional security vulnerability values; and

determine that the security vulnerability value satisfies the threshold condition.

13. The computing apparatus of claim 12 , wherein the processing device is further to:

send a notification to an administrator console that indicates that the user is vulnerable to a security exploit.

14. The computing apparatus of claim 12 , wherein the processing device is further to:

determine an access privilege level of the resource category for the user; and

modify the access privilege level of the resource category for the user in view of the security vulnerability value.

15. A non-transitory computer readable storage medium, having instructions stored therein, which when executed by a processing device of a computer system, cause the processing device to:

receive a request to associate a user with a cloud computing environment, wherein the cloud computing environment comprises one or more resource categories available to the user;

generate a security profile of the user, wherein the security profile comprises an attribute associated with usage activity by the user of a resource category of the one or more resource categories;

monitor the usage activity of the resource category by the user in view of the attribute of the security profile;

determine a security vulnerability value associated with the user in view of the usage activity of the resource category, wherein the security vulnerability value reflects a probability of a resource selected from the resource category by the user being associated with a security exploit; and

responsive to determining that the security vulnerability value satisfies a threshold condition, execute a security audit operation on the security profile.

16. The non-transitory computer readable storage medium of claim 15 , wherein the one or more resource categories comprises at least one of a file resource category, an application resource category, a security policy resource category, or a system configuration resource category.

17. The non-transitory computer readable storage medium of claim 15 , wherein to determine the security vulnerability value, the processing device is further to:

determine a first probability of selecting a particular resource from the resource category in view of the usage activity of the resource category for the user;

determine a second probability that the particular resource is associated with the security exploit in view of historical data for the cloud computing environment; and

determine a first resource vulnerability value for the resource category in view of the first probability and the second probability.

18. The non-transitory computer readable storage medium of claim 17 , wherein the security profile for the user further comprises a second attribute associated with usage activity of a second resource category of the one or more resource categories, and wherein to determine the security vulnerability value, the processing device is further to:

determine a third probability of selecting another particular resource from the second resource category in view of usage activity of the second resource category for the user;

determine a fourth probability that the another particular resource is associated with another security exploit in view of the historical data for the cloud computing environment;

determine a second resource vulnerability value for the second resource category in view of the third probability and the fourth probability; and

determine the security vulnerability value in view of the first resource vulnerability value and the second vulnerability value.

19. The non-transitory computer readable storage medium of claim 15 , wherein the processing device is further to:

identify a plurality of additional users of the cloud computing environment;

select a set of additional security profiles associated with the plurality of additional users;

determine a set of additional security vulnerability values, wherein each additional security vulnerability values in the set of additional security vulnerability values is associated with an additional security profile from the set of additional security profiles; and

determine the threshold condition in view of the set of additional security vulnerability values.

20. The non-transitory computer readable storage medium of claim 15 , wherein to execute the security audit operation, the processing device is further to:

determine an access privilege level of the resource category for the user; and

modify the access privilege level of the resource category for the user in view of the security vulnerability value.