公开(公告)号：US20240362340A1

公开(公告)日：2024-10-31

申请号：US18309628

申请日：2023-04-28

Applicant: Snowflake Inc.

Inventor： Ankur Agrawal ,  Iulia Ion ,  Shiva Dutt Paladugu ,  Cameron Tekiyeh ,  Sujay C. Yantrapragada

IPC: G06F21/57

CPC classification number: G06F21/577 ,  G06F2221/034

Abstract: A system for providing real-time automated security scoring for a data platform. The system collects application log data and threat intelligence data in a variety of formats and normalizes the application log data and threat intelligence data. A risk scoring engine uses the normalized application log data, the normalized threat intelligence data, and a risk mapping matrix to generate security score data. Security risk assessment data including the security score data is stored in a shared database so that consumers of the security scoring data can access the security risk assessment data in real-time.

公开(公告)号：US20240289470A1

公开(公告)日：2024-08-29

申请号：US18173609

申请日：2023-02-23

Applicant: Snowflake Inc.

Inventor： Andrew Clauson ,  Martin S. Heyder ,  Shiva Dutt Paladugu ,  Falguni Sonawala ,  Cameron Tekiyeh

IPC: G06F21/60 ,  G06F21/62

CPC classification number: G06F21/604 ,  G06F21/6227 ,  G06F2221/2113 ,  G06F2221/2141

Abstract: Provided herein are systems and methods for configuring user access review (UAR). A system includes at least one hardware processor coupled to a memory and configured to retrieve user data associated with a plurality of users of a database system. The user data includes current access privileges and a role of a plurality of roles assigned to each user of the plurality of users. The policy data is associated with the plurality of users and includes a list of allowed access privileges for each of the plurality of roles. A mismatch between the current access privileges of a user of the plurality of users and the allowed access privileges associated with the role of the user is detected. A remediation action is performed to adjust the current access privileges of the user based on the detected mismatch. A notification is generated to confirm the remediation action is performed.

公开(公告)号：US11734451B1

公开(公告)日：2023-08-22

申请号：US17931424

申请日：2022-09-12

Applicant: Snowflake Inc.

Inventor： Abhiram Arikapudi ,  Brian Jack Lee ,  Saurin Shah ,  Cameron Tekiyeh ,  Sujay C. Yantrapragada

IPC: G06F21/00 ,  G06F21/62 ,  G06F16/242

CPC classification number: G06F21/6254 ,  G06F16/2445

Abstract: An exchange template framework for a data platform. A data provider of the data platform instructs the data platform to generate an exchange template based on compliance rules. In response to determining by the data platform to initiate a compliance report, the data platform maps evidence items for the compliance report from one or more source tables using a data field mapper of the exchange template. The data platform generates compliance program specific views based on the evidence items mapped from the source tables and generates an anonymized view based on the compliance program specific views using an anonymization layer of the exchange template. The data platform provides the anonymized view to an assessor using one or more validation scripts of the exchange template.