Granted Patent B2

US 12,400,007 · App. 18/469,490 · Granted Aug 26, 2025

Inventors: Prithvi Narayana Rao (Allen, TX); Pramod Goyal (Ahmedabad, IN)

Assignee: CITIBANK, N.A.

G06F21/577G06F21/552

Abstract

Claims (85)

1. A system for determining comparative real-time end-to-end security vulnerabilities, the system comprising:

at least one processor; and

at least one memory coupled to the at least one processor and storing instructions that, when executed by the at least one processor, perform operations comprising:

detecting a network operation transferring data from a mobile computing system platform to a set of cloud-based computing system platforms, wherein each cloud-based computing system platform of the set of cloud-based computing system platforms is associated with a cloud-based platform service provider;

determining a first set of assessment-domains associated with each cloud-based computing system platform of the set of cloud-based computing system platforms based on the transferring of the data;

identifying a second set of assessment-domains associated with a standard cloud-based computing system platform using an assessment-domain-mapping data structure;

determining an overall assessment-domain impact level for a set of associated assessment-domains using (i) the first set of assessment-domains associated with each cloud-based computing system platform and (ii) the second set of assessment-domains; and

generating an output indicating a representation of normalized assessment-domain impact levels of the set of associated assessment-domains for each respective cloud-based computing system platform of the set of cloud-based computing system platforms.

2. The system of claim 1 , wherein determining the overall assessment-domain impact level for the set of associated assessment-domains further comprises:

comparing, for each cloud-based computing system platform, the first set of assessment-domains of the respective cloud-based computing system platform to the second set of assessment-domains to determine a matching set of assessment-domains, the matching set of assessment-domains representing the set of associated assessment-domains;

obtaining, from a third-party security entity, a set of security-vulnerability responses, wherein each response of the set of security-vulnerability responses indicates at least one security threat associated with a respective assessment domain of the matching set of assessment-domains;

assigning a threat value to each security-vulnerability response of the set of security-vulnerability responses by comparing a respective security-vulnerability response to a platform-specific policy, wherein the platform-specific policy includes security-vulnerability responses mapped to a respective threat level; and

determining the overall assessment-domain impact level for each matching assessment-domain of the set of matching assessment-domains respective to the cloud-based computing system platform by computing a weighted average of assigned threat values of the respective matching assessment-domains.

3. The system of claim 1 , wherein determining the overall assessment-domain impact level for the set of associated assessment-domains further comprises:

comparing, for each cloud-based computing system platform, the first set of assessment-domains of the respective cloud-based computing system platform to the second set of assessment-domains to determine a mismatched set of assessment-domains, the mismatched set of assessment-domains representing the set of associated assessment-domains;

obtaining, from a third-party security entity, a set of security-vulnerability responses, wherein each response of the set of security-vulnerability responses indicate at least one security threat associated with a respective assessment domain of the mismatched set of assessment-domains;

assigning a threat value to each security-vulnerability response of the set of security-vulnerability responses by comparing a respective security-vulnerability response to a platform-specific policy, wherein the platform-specific policy includes security-vulnerability responses mapped to a respective threat level; and

determining the overall assessment-domain impact level for each mismatched assessment-domain of the set of mismatched assessment-domains respective to the cloud-based computing system platform by computing a weighted average of assigned threat values of the respective mismatched assessment-domains.

4. The system of claim 1 , wherein determining the overall assessment-domain impact level for the set of associated assessment-domains further comprises:

comparing, for each cloud-based computing system platform, the first set of assessment-domains of the respective cloud-based computing system platform to the second set of assessment-domains to determine a (i) matching set of assessment-domains and (ii) a mismatched set of assessment-domains, the matching set of assessment-domains and the mismatched set of assessment-domains representing the set of associated assessment-domains;

obtaining, from a third-party security entity, a set of security-vulnerability responses, wherein each response of the set of security-vulnerability responses indicates at least one security threat associated with a respective assessment domain of the matching set of assessment-domains respective to the cloud-based computing system platform;

assigning a threat value to each security-vulnerability response of the set of security-vulnerability responses by comparing a respective security-vulnerability response to a platform-specific policy, wherein the platform-specific policy includes security-vulnerability responses mapped to a respective threat level;

determining an assessment-domain impact level for each matching assessment-domain of the set of matching assessment-domains respective to the cloud-based computing system platform by computing a weighted average of assigned threat values of the respective matching assessment-domains;

assigning a placeholder assessment-domain impact level for each mismatched assessment-domain of the set of mismatched assessment-domains respective to the cloud-based computing system platform; and

determining the overall assessment-domain impact levels for the set of associated assessment-domains using the (i) the assessment-domain impact level of each matching assessment-domain of the set of matching assessment-domains and (ii) the placeholder assessment-domain impact level for each mismatched assessment domain of the set of mismatched assessment domains, wherein the overall assessment-domain impact levels are respective cloud-based computing system platforms of the set of cloud-based computing system platforms.

5. A method for determining comparative real-time end-to-end security vulnerabilities, the method comprising:

detecting a network operation processing data between one computing system platform and a set of cloud-based computing system platforms;

determining a first set of computing aspects associated with each cloud-based computing system platform of the set of cloud-based computing system platforms based on the processing of the network operation;

identifying a second set of computing aspects associated with a comparative cloud-based computing system platform;

determining an overall-computing aspect impact level for a set of associated computing aspects between (i) the first set of computing aspects associated with each cloud-based computing system platform and (ii) the second set of computing aspects;

generating an output indicating a representation of each overall-computing aspect impact level of the set of associated computing aspects; and

in response to detecting that a given overall-computing aspect impact level for a given associated computing aspect of the set of associated computing aspects satisfies a threshold overall-computing aspect impact level, configuring a network component associated with an entity to process a second network operation via the cloud-based computing system platform associated with the satisfied overall-computing aspect impact level, wherein the given overall-computing aspect impact level for the given associated computing aspect of the set of associated computing aspects satisfying the threshold overall-computing aspect impact level is detected.

6. The method of claim 5 , wherein determining the overall-computing aspect impact level for the set of associated computing aspects further comprises:

comparing, for each cloud-based computing system platform, the first set of computing aspects of a respective cloud-based computing system platform to the second set of computing aspects to determine a matching set of computing aspects, the matching set of computing aspects representing the set of associated computing aspects;

obtaining, from a third-party security entity, a set of security-vulnerability descriptions, wherein each description of the set of security-vulnerability descriptions indicates at least one security threat associated with a respective computing aspect of the matching set of computing aspects;

assigning a threat value to each security-vulnerability description of the set of security-vulnerability descriptions by comparing a respective security-vulnerability description to a platform-specific policy, wherein the platform-specific policy includes security-vulnerability descriptions mapped to a respective threat level; and

determining the overall-computing aspect impact level for each matching computing aspect of the set of matching computing aspects respective to the cloud-based computing system platform by computing a weighted average of assigned threat values of the respective matching computing aspects.

7. The method of claim 5 , wherein determining the overall-computing aspect impact level for the set of associated computing aspects further comprises:

comparing, for each cloud-based computing system platform, the first set of computing aspects of the respective cloud-based computing system platform to the second set of computing aspects to determine a mismatched set of computing aspects, the mismatched set of computing aspects representing the set of associated computing aspects;

obtaining, from a third-party security entity, a set of security-vulnerability descriptions, wherein each description of the set of security-vulnerability descriptions indicates at least one security threat associated with a respective computing aspect of the mismatched set of computing aspects;

assigning a threat value to each security-vulnerability description of the set of security-vulnerability descriptions by comparing a respective security-vulnerability description to a platform-specific policy, wherein the platform-specific policy includes security-vulnerability descriptions mapped to a respective threat level; and

determining the overall-computing aspect impact level for each mismatched computing aspect of the set of mismatched computing aspects respective to the cloud-based computing system platform by computing a weighted average of assigned threat values of the respective mismatched computing aspects.

8. The method of claim 5 , wherein determining the overall-computing aspect impact level for the set of associated computing aspects further comprises:

comparing, for each cloud-based computing system platform, the first set of computing aspects of a respective cloud-based computing system platform to the second set of computing aspects to determine a (i) matching set of computing aspects and (ii) a mismatched set of computing aspects, the matching set of computing aspects and the mismatched set of computing aspects representing the set of associated computing aspects;

obtaining, from a third-party security entity, a set of security-vulnerability descriptions, wherein each description of the set of security-vulnerability descriptions indicates at least one security threat associated with a respective computing aspect of the matching set of computing aspects respective to the cloud-based computing system platform;

assigning a threat value to each security-vulnerability description of the set of security-vulnerability descriptions by comparing a respective security-vulnerability description to a platform-specific policy, wherein the platform-specific policy includes security-vulnerability descriptions mapped to a respective threat level;

determining a computing aspect impact level for each matching computing aspect of the set of matching computing aspects respective to the cloud-based computing system platform by computing a weighted average of assigned threat values of the respective matching computing aspects;

assigning a placeholder computing aspect impact level for each mismatched computing aspect of the set of mismatched computing aspects respective to the cloud-based computing system platform; and

determining the overall-computing aspect impact levels for the set of associated computing aspects using (i) the computing aspect impact level of each matching computing aspect of the set of matching computing aspects and (ii) the placeholder computing aspect impact level for each mismatched computing aspect of the set of mismatched computing aspects, wherein the overall-computing aspect impact levels are respective cloud-based computing system platforms of the set of cloud-based computing system platforms.

9. The method of claim 5 , further comprising:

in response to detecting that the overall-computing aspect impact level for the set of associated computing aspects satisfies a threshold overall-computing aspect impact level, configuring a network component associated with an entity to process a second network operation via the cloud-based computing system platform associated with the satisfied overall-computing aspect impact level, wherein the set of associated computing aspects satisfying the threshold overall-computing aspect impact level is detected.

10. The method of claim 5 , wherein determining the overall-computing aspect impact level for the set of associated computing aspects further comprises:

applying a blackboard artificial intelligence model to generate the overall-computing aspect impact levels for the set of associated computing aspects by using (i) the first set of computing aspects associated with each cloud-based computing system platform (ii) the second set of computing aspects, and (iii) security-vulnerability descriptions obtained from a third-party security entity.

11. The method of claim 5 , wherein determining the first set of computing aspects associated with each cloud-based computing system platform of the set of cloud-based computing system platforms further comprises:

receiving response data from each respective cloud-based computing system platform based on the processing of the network operation, wherein the response data is a set of logging information returned by each respective cloud-based computing system platform in response to the network operation being processed.

12. One or more non-transitory computer-readable medium comprising instructions that, when executed by one or more processors, cause operations comprising:

detecting a network operation processing data between one computing system platform and a set of cloud-based computing system platforms;

determining a first set of computing aspects associated with each cloud-based computing system platform of the set of cloud-based computing system platforms based on the processing of the network operation;

identifying a second set of computing aspects associated with a comparative cloud-based computing system platform;

determining an overall-computing aspect impact level for a set of associated computing aspects between (i) the first set of computing aspects associated with each cloud-based computing system platform and (ii) the second set of computing aspects;

generating an output indicating a representation of each overall-computing aspect impact level of the set of associated computing aspects; and

in response to detecting that the overall-computing aspect impact level for the set of associated computing aspects satisfies a threshold overall-computing aspect impact level, configuring a network component associated with an entity to process a second network operation via the cloud-based computing system platform associated with the satisfied overall-computing aspect impact level.

13. The medium of claim 12 , wherein determining the overall-computing aspect impact level for the set of associated computing aspects further comprises:

comparing, for each cloud-based computing system platform, the first set of computing aspects of a respective cloud-based computing system platform to the second set of computing aspects to determine a matching set of computing aspects, the matching set of computing aspects representing the set of associated computing aspects;

obtaining, from a third-party security entity, a set of security-vulnerability descriptions, wherein each description of the set of security-vulnerability descriptions indicates at least one security threat associated with a respective computing aspect of the matching set of computing aspects;

assigning a threat value to each security-vulnerability description of the set of security-vulnerability descriptions by comparing a respective security-vulnerability description to a platform-specific policy, wherein the platform-specific policy includes security-vulnerability descriptions mapped to a respective threat level; and

determining the overall-computing aspect impact level for each matching computing aspect of the set of matching computing aspects respective to the cloud-based computing system platform by computing a weighted average of assigned threat values of the respective matching computing aspects.

14. The medium of claim 12 , wherein determining the overall-computing aspect impact level for the set of associated computing aspects further comprises:

comparing, for each cloud-based computing system platform, the first set of computing aspects of the respective cloud-based computing system platform to the second set of computing aspects to determine a mismatched set of computing aspects, the mismatched set of computing aspects representing the set of associated computing aspects;

obtaining, from a third-party security entity, a set of security-vulnerability descriptions, wherein each description of the set of security-vulnerability descriptions indicates at least one security threat associated with a respective computing aspect of the mismatched set of computing aspects;

assigning a threat value to each security-vulnerability description of the set of security-vulnerability descriptions by comparing a respective security-vulnerability description to a platform-specific policy, wherein the platform-specific policy includes security-vulnerability descriptions mapped to a respective threat level; and

determining the overall-computing aspect impact level for each mismatched computing aspect of the set of mismatched computing aspects respective to the cloud-based computing system platform by computing a weighted average of assigned threat values of the respective mismatched computing aspects.

15. The medium of claim 12 , wherein determining the overall-computing aspect impact level for the set of associated computing aspects further comprises:

comparing, for each cloud-based computing system platform, the first set of computing aspects of a respective cloud-based computing system platform to the second set of computing aspects to determine a (i) matching set of computing aspects and (ii) a mismatched set of computing aspects, the matching set of computing aspects and the mismatched set of computing aspects representing the set of associated computing aspects;

obtaining, from a third-party security entity, a set of security-vulnerability descriptions, wherein each description of the set of security-vulnerability descriptions indicates at least one security threat associated with a respective computing aspect of the matching set of computing aspects respective to the cloud-based computing system platform;

assigning a threat value to each security-vulnerability description of the set of security-vulnerability descriptions by comparing a respective security-vulnerability description to a platform-specific policy, wherein the platform-specific policy includes security-vulnerability descriptions mapped to a respective threat level;

determining a computing aspect impact level for each matching computing aspect of the set of matching computing aspects respective to the cloud-based computing system platform by computing a weighted average of assigned threat values of the respective matching computing aspects;

assigning a placeholder computing aspect impact level for each mismatched computing aspect of the set of mismatched computing aspects respective to the cloud-based computing system platform; and

determining the overall-computing aspect impact levels for the set of associated computing aspects using (i) the computing aspect impact level of each matching computing aspect of the set of matching computing aspects and (ii) the placeholder computing aspect impact level for each mismatched computing aspect of the set of mismatched computing aspects, wherein the overall-computing aspect impact levels are respective cloud-based computing system platforms of the set of cloud-based computing system platforms.

16. The medium of claim 12 , wherein the operations further comprise:

in response to detecting that a given overall-computing aspect impact level for a given associated computing aspect of the set of associated computing aspects satisfies a threshold overall-computing aspect impact level, configuring a network component associated with an entity to process a second network operation via the cloud-based computing system platform associated with the satisfied overall-computing aspect impact level.

17. The medium of claim 12 , wherein determining the overall-computing aspect impact level for the set of associated computing aspects further comprises:

applying a blackboard artificial intelligence model to generate the overall-computing aspect impact levels for the set of associated computing aspects by using (i) the first set of computing aspects associated with each cloud-based computing system platform (ii) the second set of computing aspects, and (iii) security-vulnerability descriptions obtained from a third-party security entity.

18. The medium of claim 12 , wherein determining the first set of computing aspects associated with each cloud-based computing system platform of the set of cloud-based computing system platforms further comprises:

receiving response data from each respective cloud-based computing system platform based on the processing of the network operation, wherein the response data is a set of logging information returned by each respective cloud-based computing system platform in response to the network operation being processed.

Assignments (1)

Continuity (4)

References Cited (158)