摘要 |
<p>PROBLEM TO BE SOLVED: To provide a method for developing a data loss prevention model capable of detecting data loss events with little human interaction.SOLUTION: A processing device includes receiving 74 an event record corresponding to an operation performed on a computing device. The event record includes an event type and event data. The processing device also includes: transforming 76 the event type to an event number corresponding to the event type; transforming 78 the event data to a numerical representation of the event data; associating 84 an indication of whether the event type and the event data correspond to a data loss event with the event number and the numerical representation; and determining 86 the data loss prevention model using the indication, the event number, and the numerical representation.</p> |