Lohmanns Lohmanns & Partner mbB

A system and method for risk and constraint-based cybersecurity inspection of a computing environment is presented. The method includes querying an application programming interface (API) of a computing environment to detect a plurality of workloads deployed therein; determining a constraint for inspection of the computing environment; provisioning resources of the computing environment to an inspection account based on the determined constraint; and initiating inspection of the plurality of workloads utilizing the provisioned resources.

A system and method for inspecting private code repositories for cybersecurity issues is presented. The method includes accessing a private code repository, the private code repository including a plurality of code objects; generating a pull request including code for an inspector, the inspector configured to detect a cybersecurity object in a code object of the plurality of code objects; initiating the pull request in the private code repository; and receiving a result from the inspector, wherein the result includes an identifier of the code object and an identifier of a detected cybersecurity object, wherein the cybersecurity object indicates a cybersecurity issue.

A system and method for improving inspection of software containers is presented. The method includes detecting a plurality of configuration files, each corresponding to a software container image corresponding to a software container deployed in the cloud computing environment; parsing a first configuration file to detect a first plurality of commands; generating a first fingerprint based on the detected first plurality of commands; parsing a second configuration file to detect a second plurality of commands; generating a second fingerprint based on the detected second plurality of commands; determining that the first configuration file matches the second configuration file in response to detecting a match based on the fingerprints; determining that the first configuration file mismatches the second configuration file in response to detecting a mismatch; and inspecting the first configuration file for a cybersecurity object in response to determining that the first configuration file matches the second configuration file.

A system and method for cybersecurity threat detection using an activity baseline generated based on sensor-detected runtime execution data is presented. The method includes: receiving aggregated runtime data from a sensor deployed on a resource in a cloud computing environment; generating an event log based on the aggregated runtime data, each event in the event log generated by extracting data from the aggregated runtime data; generating an activity baseline for a process executed on the resource based on the event log; receiving a new event from the sensor; and determining that the new event is anomalous based on the generated activity baseline.

A system and method for performing inspection of a reachable code object of a cloud computing environment is presented. The method includes detecting a network path for each resource of a plurality of resources deployed in a cloud computing environment, wherein the network path includes at least a portion between an external network and the cloud computing environment; determining reachability parameters of each resource of the plurality of resources for which a network path is detected; accessing a code repository including a plurality of code objects; actively inspecting the network path of a resource to determine if the network path is a viable network path; mapping each resource having a viable network path to a code object of the plurality of code objects; inspecting a mapped code object for a cybersecurity object; and initiating a remediation action based on the cybersecurity object.

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …

Zusammenfassung wird geladen …