Patent ID: 9256727
Filing Date: 2016-02-09
CPC Classification: G06F

Claim Text:
1. A computer-implemented method for detecting data leaks, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: identifying a plurality of computing devices that include multiple data-distribution channels utilized by at least one user within an organization; associating the multiple data-distribution channels with the user within the organization; monitoring the multiple data-distribution channels associated with the user within the organization; detecting, by analyzing data distributed from the plurality of computing devices by the user via the multiple data-distribution channels, a plurality of partial data loss prevention (DLP) policy violations committed by the user, wherein a partial DLP policy violation comprises a violation of a DLP policy that does not amount to a full violation of the DLP policy; assigning a weight to each of the plurality of partial DLP policy violations that quantifies a degree to which the user violated the DLP policy; determining that the weights of the user's DLP policy violations cumulatively exceed a predetermined threshold; performing a security action in response to determining that the weights of the user's DLP policy violations cumulatively exceed the predetermined threshold.