Patent ID: 11907393
Assignee: NETSKOPE, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 12:
13. A non-transitory computer readable storage medium impressed with computer program instructions to efficiently classify, using a document handle generated by cloud-based provider services to encode, from a document type as opposed to a file type, sensitivity of documents generated by and downloaded from the cloud-based provider services to save analysis time during later Data Loss Prevention (DLP) analysis to prevent exfiltration, the instructions, when executed on a processor of a proxy positioned on a network separate from a user and the cloud-based provider, implement a method comprising:
monitoring network traffic using an inline proxy that is independent and not provided by a cloud-based provider of service, wherein the traffic includes a web page, the web page including:
a link for a user to select to download the document generated by the cloud-based services,
a domain name, and
an API parameter string that includes the document handle;

using the domain name to select a parser adapted for the cloud-service provider;
the parser parsing the network traffic, generated in response to a user selecting the link requesting the download of the document, to identify the document handle from the API parameter string;
determining a sensitivity classification from the identified document handle; and
encoding the determined sensitivity classification into header metadata that is part of the document,
whereby the encoded sensitivity classification travels with the document and enables exfiltration policy enforcement in a way that saves enforcement processing time, based on acquiring the encoded sensitivity classification from the document header metadata.