Microsoft patents cloud security check for new code before launch
Microsoft describes a system that scans new cloud infrastructure setups before they go live to find security gaps. It creates a test model combining the new code with existing systems to predict potential breaches.
In the filing’s own words
This disclosure describes a preventative breach detection system that detects and addresses potential resource breaches in candidate code-based infrastructure templates before deployment in a production environment within a cloud computing system. For example, the preventative breach detection system provides a preemptive security framework that utilizes hybrid pattern-based data structures, security pattern analysis, and resource vulnerability patterns to determine the security posture of a candidate code-based infrastructure based on its potential impact on the surrounding infrastructure in the production environment. By doing so, the preventative breach detection system quickly detects potential new resource breaches or changes in the security threat levels that may occur before the candidate code-based infrastructure is introduced into the production environment of the cloud computing system.
What exactly they claim (claim 1)
1. A computer-implemented method for preventing resource breaches in a computing system, comprising: generating a pattern-based data structure from a candidate infrastructure template with candidate resources and candidate parameters, wherein the candidate infrastructure template describes configuration and provisioning of infrastructure resources according to parameters to implement one or more target applications; determining related active resources in the computing system that are associated with the candidate resources and the candidate parameters within the candidate infrastructure template; generating a test environment that includes a hybrid pattern-based data structure, the hybrid pattern-based data structure combining the candidate infrastructure template with the related active resources; determining a resource vulnerability pattern in the hybrid pattern-based data structure based on performing a security pattern analysis on the test environment; and providing an indication of a security threat based on determining that the resource vulnerability pattern meets a security threat threshold.
Facts
- Company
- Microsoft (Microsoft Technology Licensing, LLC)
- Official title
- PREVENTING RESOURCE BREACHES IN A CLOUD COMPUTING SYSTEM CAUSED BY NEW CODE-BASED INFRASTRUCTURES USING PREVENTATIVE PATTERN-BASED ANALYSIS
- Publication number
- US20260288977A1
- Application number
- 19697059
- Filed
- Jun 3, 2026
- Published
- Sep 24, 2026
- Inventors
- 5
- Claims
- 20
Classified under
G06F 21/577 Physics & computingG06F 21/53 Physics & computingG06F 21/554 Physics & computingMore from Microsoft in Security & privacy
- Microsoft patents system to call 911 for others during video calls Sep 22, 2026
- Microsoft patents system to block fake code suggested by AI Sep 15, 2026
- Microsoft patents one-way data flow to block network attacks Sep 10, 2026
- Microsoft patents voice coding that hides speaker identity for secure calls Sep 17, 2026
- Microsoft patents security checks for AI chats using user and model profiles Oct 1, 2026
Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.