System and method for analyzing network objects in a cloud environment
A method and system for providing textual insights on objects deployed in a cloud environment are provided. The method includes collecting object data on objects deployed in the cloud environment, wherein objects are deployed and operable at different layers of the cloud environment; identifying objects deployed in the cloud environment; constructing a visual representation of the cloud environment, including the identified objects and their relationships; and generating textual insights on the identified objects and their relationships using natural language processing.
1. A method for determining exposure of vulnerable network objects having cyber-threats, comprising:
collecting network object data on a plurality of network objects deployed in a cloud computing environment;
constructing a network graph based on the collected network object data, wherein the network graph includes a visual representation of network objects identified in the cloud computing environment;
determining relationships between the identified network objects in the network graph, wherein the determined relationships between the identified network objects includes descriptions of connections between the identified network objects;
analyzing the network graph and the determined relationships to generate insights, wherein the generated insights include at least a route between an identified network object and an external network; and
tagging network objects in the network graph for which the insight is generated.
2. The method of claim 1 , further comprising:
determining a number of transmissions based on a route between a first identified network object and the external network; and
generating a visual indication of the number of transmissions.
3. The method of claim 2 , further comprising:
determining an order of transmission between the identified network objects; and
populating the network graph with a data path based on the determined order of transmission and the determined route.
4. The method of claim 1 , further comprising:
generating a list including each network object in the route between an identified network object and the external network.
5. The method of claim 4 , further comprising:
determining an order of transmission between the identified network objects; and
generating the list further based on the determined order of transmission.
6. The method of claim 5 , further comprising:
generating a visual representation of the generated list.
7. The method of claim 1 , further comprising:
populating the network graph with a data path between the identified network object and a destination network object, wherein the identified network object is exposed to the external network.
8. The method of claim 7 , further comprising:
determining an order of transmission between the identified network object and the destination network object; and
populating the network graph with the data path further based on the determined order of transmission.
9. The method of claim 1 , further comprising:
generating an alert based on the generated insights.
10. A non-transitory computer-readable medium storing a set of instructions for determining exposure of vulnerable network objects having cyber-threats, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a device, cause the device to:
collect network object data on a plurality of network objects deployed in a cloud computing environment;
construct a network graph based on the collected network object data, wherein the network graph includes a visual representation of network objects identified in the cloud computing environment;
determine relationships between the identified network objects in the network graph, wherein the determined relationships between the identified network objects includes descriptions of connections between the identified network objects;
analyze the network graph and the determined relationships to generate insights, wherein the generated insights include at least a route between an identified network object and an external network; and
tag network objects in the network graph for which the insight is generated.
11. A system for determining exposure of vulnerable network objects having cyber-threats comprising:
a processing circuitry;
a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
collect network object data on a plurality of network objects deployed in a cloud computing environment;
construct a network graph based on the collected network object data, wherein the network graph includes a visual representation of network objects identified in the cloud computing environment;
determine relationships between the identified network objects in the network graph, wherein the determined relationships between the identified network objects includes descriptions of connections between the identified network objects;
analyze the network graph and the determined relationships to generate insights, wherein the generated insights include at least a route between an identified network object and an external network; and
tag network objects in the network graph for which the insight is generated.
12. The system of claim 11 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
determine a number of transmissions based on a route between a first identified network object and the external network; and
generate a visual indication of the number of transmissions.
13. The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
determine an order of transmission between the identified network objects; and
populate the network graph with a data path based on the determined order of transmission and the determined route.
14. The system of claim 11 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
generate a list including each network object in the route between an identified network object and the external network.
15. The system of claim 14 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
determine an order of transmission between the identified network objects; and
generate the list further based on the determined order of transmission.
16. The system of claim 15 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
generate a visual representation of the generated list.
17. The system of claim 11 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
populate the network graph with a data path between the identified network object and a destination network object, wherein the identified network object is exposed to the external network.
18. The system of claim 17 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
determine an order of transmission between the identified network object and the destination network object; and
populate the network graph with the data path further based on the determined order of transmission.
19. The system of claim 11 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
generate an alert based on the generated insights.