Patent ID: 8763072
Filing Date: 2014-06-24
Classification: G06F,H04L

Abstract:
1. A method comprising: monitoring, by a data loss prevention (DLP) agent executing on a computing system, outbound data transfers performed by the computing system; classifying data of a first outbound data transfer as being a first data type from a plurality of data types; determining a first reputation score for the first outbound data transfer to a destination entity specified to receive the first outbound data transfer based on the first data type and the destination entity; classifying data of a second outbound data transfer as being a second data type from the plurality of data types; determining a second reputation score for the second outbound data transfer to the destination entity specified to receive the second outbound data transfer based on the second data type and the destination entity; detecting, by the DLP agent, a violation of a DLP policy in the first outbound data transfer based on the first reputation score; detecting, by the DLP agent, no violation of the DLP policy in the second outbound data transfer based on the second reputation score, wherein the detecting the violation comprises comparing the first reputation score against a specified reputation threshold for a given data type of the data being transferred, wherein the violation of the DLP policy is detected when the first reputation score is less than the specified reputation threshold; and in response to the first reputation score being less than the specified reputation threshold,