Contextual data security
There is disclosed in one example a computing apparatus, including: a hardware platform including a processor and a memory; a network interface; a userspace application store including a plurality of userspace applications, wherein at least some of the userspace applications are programmed to communicate via the network interface; and instructions encoded within the memory to: enumerate social connections of a user via the userspace applications; assign the social connections to virtual groups according, at least in part, to correlated connection services; assign data transfer policies to the virtual groups; detect an attempted data transfer to a social connection; and enforce the data transfer policy for a virtual group of the social connection of the attempted data transfer.
1 . A computing apparatus, comprising:
a hardware platform comprising a processor circuit and a memory;
a network interface;
a plurality of userspace applications stored in the memory, wherein at least some of the userspace applications are programmed to communicate via the network interface; and
instructions encoded within the memory to:
enumerate social media connections of a user via the userspace applications, wherein the social media connections comprise connections to social media platforms or chat services;
use a machine learning algorithm to determine a plurality of virtual groups that the social media connections belong to according, at least in part, to correlated connection services, and to determine acceptable data transfer policies for the plurality of virtual groups according to types of data that the machine learning algorithm determines are commonly shared with the virtual groups;
select, from the acceptable data transfer policies, a data transfer policy for an attempted data transfer to a social media connection, wherein the attempted data transfer comprises a message with an attachment, wherein selecting is based on a virtual group that the social media connection belongs to, and content of the attachment; and
enforce the selected data transfer policy.
2 . The computing apparatus of claim 1 , wherein enumerating the social media connections comprises enumerating the social media connections across a plurality of service connections.
3 . The computing apparatus of claim 2 , wherein the service connections comprise a connection selected from e-mail, enterprise chat, personal chat, short messaging service (SMS), file storage, file sharing, and social media.
4 . The computing apparatus of claim 1 , wherein the instructions are further to select a data transfer classifier from a file name, file type, file source, uniform resource locator (URL) reputation, metadata, key words, natural language processing, optical character recognition, and voice recognition.
5 . The computing apparatus of claim 1 , wherein the social media connections include group connections.
6 . The computing apparatus of claim 1 , wherein the instructions are further to assign a social connection to more than one group according to a context.
7 . The computing apparatus of claim 6 , wherein the context includes a connection service.
8 . The computing apparatus of claim 1 , wherein the instructions are further to operate an artificial intelligence module to assign the social media connections to a plurality of virtual groups, wherein the artificial intelligence module is configured to characterize data transfers to the virtual groups according to a data transfer classifier.
9 . The computing apparatus of claim 8 , wherein the instructions are to receive a training data set and to train the artificial intelligence module with the training data set.
10 . The computing apparatus of claim 9 , wherein the artificial intelligence module is a neural network.
11 . The computing apparatus of claim 9 , wherein the training data set includes an initial virtual group.
12 . The computing apparatus of claim 11 , wherein the initial virtual group includes a data transfer restriction.
13 . The computing apparatus of claim 12 , wherein the instructions are to maintain the data transfer restriction after training.
14 . One or more tangible, non-transitory computer-readable storage media having stored thereon executable instructions to:
provide a machine learning environment;
enumerate network communication-capable applications on a local device;
enumerate a plurality of social media connection services available via the network communication-capable applications, wherein the social media connection services comprise social media platforms or chat services;
identify a plurality of social media connections for a user of the local device, correlated to at least one social media connection service;
use the machine learning environment to assign the social media connections to a plurality of connection groups based at least in part on connection services that provide the social media connections, and determine acceptable data sharing policies for the connection groups according to types of data that the machine learning environment determines are commonly shared in the connection groups;
intercept an attempt to share data via a connection service, wherein the attempt to share data comprises sending a message with an attachment; and
apply a data sharing policy of a connection group associated with the attempt comprising selecting the data sharing policy based on the connection group and a content of the attachment.
15 . The one or more tangible, non-transitory computer-readable storage media of claim 14 , further comprising a local device to execute the executable instructions.
16 . The one or more tangible, non-transitory computer-readable storage media of claim 14 , wherein enumerating the plurality of social media connections comprises enumerating all applications on a device capable of network communications.
17 . The one or more tangible, non-transitory computer-readable storage media of claim 14 , further comprising instructions to offload at least some instructions to a server device.
18 . A computer-implemented method of providing contextual security for a user, comprising:
enumerating a plurality of social media accounts for the user based on accounts of the user to access social media platforms or chat services;
operating a machine learning algorithm to determine permissible data transfer profiles for a plurality of social media connection virtual groups based at least in part on connection services that provide the social media accounts, assigning the social media accounts to the social media connection virtual groups, wherein the permissible data transfer profiles are based on types of data that the machine learning algorithm determines are commonly shared via the social media accounts;
detecting an attempted data transfer via a social media account, wherein the attempted data transfer comprises a message with an attachment; and
managing the attempted data transfer according to a permissible data transfer profile for a social media connection virtual group of the social media account, and a content of the attachment.
19 . The method of claim 18 , wherein building the permissible data transfer profiles comprises accounting for second-order or higher connection information.
20 . The method of claim 19 , further comprising crowdsourcing the second-order or higher connection information.