System and method for analyzing real-time data from heterogeneous collaboration platforms to identify risk
A data security system uses API connections to heterogeneous collaboration platforms to analyze elements of conversations to identify regulatory, security, and privacy risks and take corresponding actions to limit and remediate risks in real-time. In some embodiments, the data security system can use API event triggers to determine when an action is taken, apply a machine learning-based detections to identify relevant risks, and take a corresponding remedial action such as removing a user from a conversation.
1 . A data security system comprising:
a memory;
a processor; and
a non-transitory, computer-readable storage medium storing a set of instructions executable by the processor, the set of instructions comprising instructions for:
interfacing with a plurality of heterogeneous online collaboration platforms;
monitoring an active meeting conducted over a first collaboration platform of the collaboration platforms, the active meeting involving a plurality of users of the first collaboration platform communicating with each other in a collaboration session over the first collaboration platform, the monitoring including monitoring communications and monitoring collaboration platform settings;
detecting, during the active meeting, an occurrence of one or more conditions from the monitoring of the active meeting, the one or more conditions relating to a combination of characteristics of the active meeting, the characteristics comprising of at least one of visual communication content, textual/audio communication content, participant activity events, and collaboration platform settings;
analyzing the detected occurrence of the one or more conditions to identify a security risk related to sensitive data within the communications;
determining, based on the analysis, that the occurrence of the one or more conditions poses the security risk; and
based on a determining that the occurrence of the one or more conditions poses the security risk, taking one or more remedial actions, wherein the one or more remedial actions includes sending a notification to a user or system administrator.
2 . The data security system of claim 1 , wherein detecting one or more conditions further comprises detecting the occurrence of first and second conditions of the active meeting.
3 . The data security system of claim 2 , wherein detecting one or more conditions further comprises detecting the occurrence of the first, the second, and a third condition of the active meeting.
4 . The data security system of claim 1 , wherein the one or more remedial actions includes adjusting settings or policies of the first collaboration platform.
5 . The data security system of claim 1 , wherein the one or more remedial actions further comprises removing a user from the active meeting.
6 . The data security system of claim 5 , wherein the one or more remedial actions includes the system administrator initiating reactive remedial actions.
7 . The data security system of claim 1 , wherein the one or more remedial actions includes notifying a user of the first collaboration platform.
8 . A data security method comprising:
interfacing with a plurality of heterogeneous online collaboration platforms;
monitoring an active meeting conducted over a first collaboration platform of the collaboration platforms, the active meeting involving a plurality of users of the first collaboration platform communicating with each other in a collaboration session over the first collaboration platform, the monitoring including monitoring communications and monitoring collaboration platform settings;
detecting, during the active meeting, an occurrence of one or more conditions from the monitoring of the active meeting, the one or more conditions relating to a combination of characteristics of the active meeting, the characteristics comprising of at least one of visual communication content, textual/audio communication content, participant activity events, and collaboration platform settings;
analyzing the detected occurrence of the one or more conditions to identify a security risk related to sensitive data within the communications;
determining, based on the analysis, that the occurrence of the one or more conditions poses the security risk; and
based on a determining that the occurrence of the one or more conditions poses the security risk, taking one or more remedial actions, wherein the one or more remedial actions includes sending a notification to a user or system administrator.
9 . The method of claim 8 , wherein detecting one or more conditions further comprises detecting the occurrence of first and second conditions of the active meeting.
10 . The method of claim 9 , wherein detecting one or more conditions further comprises detecting the occurrence of the first, the second, and a third condition of the active meeting.
11 . The method of claim 8 , wherein the one or more remedial actions includes adjusting settings or policies of the first collaboration platform.
12 . The method of claim 8 , wherein the one or more remedial actions further comprises removing a user from the active meeting.
13 . The method of claim 12 , wherein the one or more remedial actions includes the system administrator initiating remedial actions.
14 . The method of claim 8 , wherein the one or more remedial actions includes notifying a user of the collaboration platform.
15 . A data security system comprising:
a memory;
a processor; and
a non-transitory, computer-readable storage medium storing a set of instructions executable by the processor, the set of instructions comprising instructions for:
interfacing with a plurality of heterogeneous online collaboration platforms;
monitoring an active meeting conducted over a first collaboration platform of the collaboration platforms, the active meeting involving a plurality of users of the first collaboration platform communicating with each other in a collaboration session over the first collaboration platform, the monitoring including monitoring communications and monitoring collaboration platform settings;
detecting, during the active meeting, an occurrence of one or more conditions from the monitoring of the active meeting, the one or more conditions relating to a combination of characteristics of the active meeting, the characteristics comprising of at least one of visual communication content, textual/audio communication content, participant activity events, and collaboration platform settings;
analyzing the detected occurrence of the one or more conditions to identify a security risk related to sensitive data within the communications;
determining, based on the analysis, that the occurrence of the one or more conditions poses the security risk; and
based on a determining that the occurrence of the one or more conditions poses the security risk, taking one or more remedial actions, wherein the one or more remedial actions includes sending a notification to a user or system administrator.
16 . The data security system of claim 15 , wherein detecting one or more conditions further comprises detecting a first condition from a transcript of the meeting and a second condition relating to a user authentication.
17 . The data security system of claim 15 , wherein detecting one or more conditions further comprises detecting a first condition relating to application sharing by a participant of the meeting and a second condition relating to an encryption setting.
18 . The data security system of claim 15 , wherein detecting one or more conditions further comprises detecting a first condition relating to application sharing by a participant of the meeting and a second condition relating to an initiation of recording of the meeting.
19 . The data security system of claim 15 , wherein detecting one or more conditions further comprises detecting a first condition relating to screen sharing by a participant of the meeting and a second condition relating to an initiation of recording of the meeting.
20 . The data security system of claim 1 , wherein the risk is related to content of the monitored communications.