Patent ID: 9235629
Filing Date: 2016-01-12
CPC Classification: G06F,G06Q,H04L

Claim Text:
1. A method, comprising: identifying a plurality of incidents of violations of a policy upon detecting presence of confidential information in a plurality of messages; storing the plurality of violation incidents of the policy in a data repository, wherein each of the plurality of violation incidents is associated with one or more message attribute values; receiving a user request to correlate one of the plurality of violation incidents of the policy stored in the data repository to other incidents of the plurality of violation incidents of the policy based on at least one common message attribute value; in response to the user request, correlating, by a processing device, a requested violation incident with the other incidents of the plurality of violation incidents of the policy based on the at least one common message attribute value of the one or more message attribute values, wherein the correlating comprises searching the data repository using the at least one common message attribute value; providing, for a user interface, resulting correlation information that identifies, for each of a plurality of time periods, a count of a number of incidents similar to the one of the plurality of violation incidents that occurred during a corresponding time period of the plurality of time periods; and providing the incidents similar to the one of the plurality of violation incidents that occurred during the corresponding time period of the plurality of time periods in response to a selection associated with the count for the corresponding time period of the plurality of time periods.