Methods for discovering sensitive information on computer networks
View Patent ↗One embodiment of a method of the present invention for discovering sensitive information on computer network provides for discovering databases on a computer network, defining a pattern for a data discovery, discovering qualifying records by matching the pattern with field names and/or record values in the databases, sending electronic notification to a database administrator managing the qualifying database, receiving a selection choice from the database administrator managing the qualifying database identifying the status for the qualifying records.
1. A method, comprising the steps of:
a) discovering one or more databases on a computer network by running a network crawler configured to identify said one or more databases on said computer network,
b) adding said one or more databases discovered by said network crawler on said computer network to one or more electronic storage devices,
c) defining a pattern for a database data discovery,
d) discovering one or more qualifying records in said one or more databases by matching said pattern with field names or record values in said one or more databases,
e) adding said one or more qualifying records discovered by matching said pattern to said one or more electronic storage devices,
f) sending an electronic notification to a database administrator managing a qualifying database, wherein said qualifying database is a database containing said one or more qualifying records discovered by matching said pattern with field names or record values in said one or more databases, wherein said electronic notification contains a link to a web-based graphical user interface comprising a summary of said one or more qualifying records found on said qualifying database and a selector for assigning a status to said one or more qualifying records,
g) receiving a selection choice to said selector from said database administrator managing said qualifying database, wherein said selection choice identifies said status for said one or more qualifying records, and
h) updating said one or more electronic storage devices with said selection choice provided by said database administrator identifying said status for said one or more qualifying records.
2. The method of claim 1 , further comprising the step of:
i) determining whether said selection choice provided by said database administrator identifying said status for said one or more qualifying records passes automated validation.
3. The method of claim 1 , further comprising the step of:
i) determining whether said record values in said one or more qualifying records are encrypted.
4. The method of claim 1 , further comprising the step of:
i) determining a level of encryption of said record values in said one or more qualifying records.
5. The method of claim 1 , wherein said selection choice provided by said database administrator indicates that said one or more qualifying records was a false positive.
6. The method of claim 1 , wherein said selection choice provided by said database administrator indicates that said one or more qualifying records are in a third-party database.
7. The method of claim 1 , wherein said selection choice provided by said database administrator indicates that said one or more qualifying records are contained in one or more replication columns.
8. The method of claim 1 , wherein said selection choice provided by said database administrator indicates that said one or more qualifying records are compliant with company policies.
9. The method of claim 1 , wherein said selection choice provided by said database administrator indicates that said one or more qualifying records are required.
10. The method of claim 1 , wherein said selection choice provided by said database administrator indicates that said one or more qualifying records were deleted.
11. The method of claim 1 , wherein said selection choice provided by said database administrator indicates that said one or more qualifying records are needed for development purposes.