Potential data leakage reporting system, method, and computer program product

摘要

A reporting system, method, and computer program product are provided with respect to occurrences of potential data leakage. In use, a plurality of occurrences of potential data leakage is identified based on user behavior. In addition, a report is provided based on a determination of whether an aspect of the plurality of occurrences exceeds a predetermined threshold.

主权项

1. A method, comprising:
identifying settings related to monitoring one or more computer systems for data leakage, wherein the settings are obtained via a graphical user interface; receiving, from one or more of a plurality of agents, one or more communications indicating a plurality of occurrences of potential data leakage from a monitored computer system, wherein:
each of the plurality of agents executes on one of a plurality of computer systems other than the monitored computer system,each of the plurality of agents is configured to monitor at least one type of user behavior indicated by the settings, the at least one type of user behavior associated with the one of the plurality of computer systems on which the agent executes, wherein each of the plurality of agents is configured to monitor a different type of behavior, andthe plurality of occurrences of data leakage are associated with data transmissions from the monitored computer system; identifying the plurality of occurrences of potential data leakage based on the one or more types of user behavior monitored by the plurality of agents; determining, using a processor, whether an aspect of the plurality of occurrences exceeds a first predetermined threshold; providing a first report of all data leakage occurrences during a monitored time period based on the determination that the aspect of the plurality of occurrences exceeds the first predetermined threshold; and performing a non-report action responsive to a determination that the aspect of the plurality of occurrences exceeds a second predetermined threshold different from the first predetermined threshold.