SaaS Data Exposure Assessment via Network Path Probing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud-based service providers may inadvertently expose sensitive data to public disclosure, and large organizations face challenges in monitoring and ensuring adequate data protection by numerous SaaS vendors.
Innovation Solution
A system comprising an analysis computing system and a collection computing system that automatically identifies network paths and assesses data storage practices of SaaS providers, simulating unauthorized access to detect sensitive information, and takes corrective actions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If service providers store client data in cloud computing systems, then convenience and flexibility are improved, but data security and privacy protection deteriorate
Solution Approach 1:
The patent introduces an intermediary assessment system that acts as a mediator between cloud service providers and clients. This system automatically evaluates data storage security by analyzing network paths, access controls, and storage configurations, providing independent verification that reconciles the convenience of cloud storage with the need for security assurance.
2Measurement precision
If manual monitoring of service provider data practices is implemented, then data security assessment precision is improved, but time consumption and resource usage increase
Solution Approach 1:
The assessment system is designed to autonomously perform data security evaluations without requiring manual intervention. It automatically collects data from service providers, analyzes storage configurations, evaluates access controls, and generates security assessments independently, eliminating time-consuming manual monitoring while maintaining comprehensive evaluation precision.
Solution Approach 2:
The patent replaces manual mechanical monitoring processes with automated computational systems. Instead of human analysts manually reviewing data storage practices, the system uses automated tools to crawl network paths, analyze configurations, and evaluate security controls, dramatically reducing time consumption while maintaining or improving assessment precision.
3Adaptability or versatility
If comprehensive evaluation of multiple service providers is performed, then data security coverage is improved, but system complexity increases
Solution Approach 1:
The assessment system is designed as a universal platform capable of evaluating multiple different cloud service providers across various data storage configurations. It implements a standardized assessment framework that can adapt to different providers while maintaining consistent security evaluation criteria, achieving comprehensive coverage without proportionally increasing system complexity.
Data Source
AI summary
This disclosure describes techniques that include assessing whether various service providers, such as cloud service providers or SaaS providers, are properly maintaining sensitive data (e.g., private, confidential, and/or non-public information) that is entrusted to them. In one example, this disclosure describes a method that includes collecting, by a computing system, information about interactions with a service provider computing system; identifying, based on the information about the interactions, a plurality of network paths, each associated with a data object accessed at the service provider computing system; requesting, based on the plurality of network paths, data from the service provider computing system; receiving a response; determining, based on the response, whether the response includes sensitive information; and taking action based on whether the response includes sensitive data.