Patent ID: 9185118
Filing Date: 2015-11-10
Classification: G06F,H04L

Abstract:
1. A method comprising: monitoring, by a data loss prevention (DLP) agent executing on a computing system, outbound data transfers performed by the computing system; classifying the outbound data transfers as being one of a plurality of data types; determining a first reputation score for a first outbound data transfer to a destination entity specified to receive the first outbound data transfer based on the classifying and the destination entity, wherein the first outbound data transfer is a first data type of the plurality of data types; determining a second reputation score for a second outbound data transfer to the destination entity specified to receive the second outbound data transfer based on the classifying and the destination entity, wherein the second outbound data transfer is a second data type of the plurality of data types; comparing the first reputation score against a reputation threshold to detect a first violation of a DLP policy, wherein the first violation is detected when the first reputation score is less than the reputation threshold; comparing the second reputation score against the reputation threshold to detect a second violation of the DLP policy, wherein the second violation is detected when the second reputation score is less than reputation threshold; and performing at least one of remedial operations or reporting operations in response to the first violation, second violation or both being detected.