Systems and methods for determining the risk of information leaks from cloud-based services

1. A computer-implemented method for determining the risk of information leaks from cloud-based services, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:

identifying a cloud-based service that provides remote software-services to client organizations;

extracting, from a publicly accessible page of the cloud-based service, a list of customers that use the cloud-based service;

retrieving, for each customer in the list of customers, at least one link to a customer page on the cloud-based service that represents a method for the customer to access the remote software-services offered by the cloud-based service;

analyzing each identified customer page for at least one risk factor;

calculating, based on the analysis, a risk score for the service that represents an overall estimation of security risks to client organizations that utilize the cloud-based service.

2. The method of claim 1 , wherein analyzing the customer page for risk factors comprises determining that the customer page comprises at least one of:

a telephone number;

an e-mail address;

a link to an additional customer page that represents an additional method for the customer to access additional remote software-services offered by the cloud-based service;

a link to an alternate customer page on an additional cloud-based service;

information that has been determined to be sensitive by the customer associated with the customer page;

a form of encryption used by the customer page.

3. The method of claim 1 , wherein analyzing the customer page for risk factors comprises:

retrieving a hypertext transfer protocol (HTTP) header associated with the customer page;

analyzing the hypertext transfer protocol header for risk factors.

4. The method of claim 1 , wherein retrieving the link to the customer page comprises identifying an organization-specific subdomain of the cloud-based service.

5. The method of claim 1 , further comprising, at a subsequent point in time:

retrieving, for each customer in the list of customers, links to customer pages on the cloud-based service;

performing a subsequent analysis of each retrieved customer page for risk factors;

updating, based on the subsequent analysis, the risk score for the service.

6. The method of claim 1 , wherein identifying the cloud-based service comprises:

searching a public page of a client organization;

determining that the public page of the client organization comprises at least one of:

a link to a subdomain of the cloud-based service;

an endorsement of the cloud-based service.

7. The method of claim 1 , further comprising, for a particular customer of the cloud-based service:

identifying additional cloud-based services that provide additional remote software-services to the customer;

for each identified additional cloud-based service, analyzing additional customer pages that represents methods for the customer to access the additional remote software-services offered by the additional cloud-based services;

calculating, for the customer of the cloud-based services, a unified customer risk score that represents an overall estimation of security risks to the customer across each of the cloud-based services.

8. The method of claim 7 , wherein the unified customer risk score is based on a combination of:

the total quantity of risk factors identified on customer pages associated with the customer;

the number of cloud-based services that host at least one customer page associated with the customer.

9. The method of claim 1 , further comprising performing, based on the risk score satisfying a predetermined threshold, a security action comprising at least one of:

notifying an administrator of the cloud-based service that the risk score satisfied the predetermined threshold;

preventing access to at least one customer page on the cloud-based service.

10. A system for determining the risk of information leaks from cloud-based services, the system comprising:

an identification module, stored in memory, that identifies a cloud-based service that provides remote software services to client organization;

an extracting module, stored in memory, that extracts, from a publicly accessible page of the cloud-based service, a list of customers that use the cloud-based service;

a retrieving module, stored in memory, that retrieves, for each customer in the list of customers, at least one link to a customer page on the cloud-based service that represents a method for the customer to access remote software-services offered by the cloud-based service;

an analyzing module, stored in memory, that analyzes each identified customer page for at least one risk factor;

a calculating module, stored in memory, that calculates, based on the analysis, a risk score for the service that represents an overall estimation of security risks to client organizations that utilize the cloud-based service;

at least one processor that executes the identification module, the extracting module, the retrieving module, the analyzing module, and the calculating module.

11. The system of claim 10 , wherein the analyzing module analyzes the customer page for risk factors by determining that the customer page comprises at least one of:

a telephone number;

an e-mail address;

a link to an additional customer page that represents an additional method for the customer to access additional remote software-services offered by the cloud-based service;

a link to an alternate customer page on an additional cloud-based service;

information that has been determined to be sensitive by the customer associated with the customer page;

a form of encryption used by the customer page.

12. The system of claim 10 , wherein the analyzing module analyzes the customer page for risk factors by:

retrieving a hypertext transfer protocol (HTTP) header associated with the customer page;

analyzing the hypertext transfer protocol header for risk factors.

13. The system of claim 10 , wherein the retrieving module retrieves the link to the customer page by identifying an organization-specific subdomain of the cloud-based service.

14. The system of claim 10 , wherein, at a subsequent point in time:

the retrieving module retrieves, for each customer in the list of customers, links to customer pages on the cloud-based service;

the analyzing module performs a subsequent analysis of each retrieved customer page for risk factors;

the calculating module updates, based on the subsequent analysis, the risk score for the service.

15. The system of claim 10 , wherein the identification module identifies the cloud-based service by:

searching a public page of a client organization;

determining that the public page of the client organization comprises at least one of:

a link to a subdomain of the cloud-based service;

an endorsement of the cloud-based service.

16. The system of claim 10 , wherein:

the identification module identifies additional cloud-based services that provide additional remote software-services to the customer;

the analyzing module analyzes, for each identified additional cloud-based service, additional customer pages that represent methods for the customer to access the additional remote software-services offered by the additional cloud-based services;

the calculating module calculates, for the customer of the cloud-based services, a unified customer risk score that represents an overall estimation of security risks to the customer across each of the cloud-based services.

17. The system of claim 16 , wherein the calculating module calculates the unified risk score based on a combination of:

the total quantity of risk factors identified on customer pages associated with the customer;

the number of cloud-based services that host at least one customer page associated with the customer.

18. The system of claim 10 , further comprising a security module, stored in memory, that performs, based on the risk score satisfying a predetermined threshold, a security action comprising at least one of:

notifying an administrator of the cloud-based service that the risk score satisfied the predetermined threshold;

preventing access to at least one customer page on the cloud-based service.

19. A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

identify a cloud-based service that provides remote software-services to client organizations;

extract, from a publicly accessible page of the cloud-based service, a list of customers that use the cloud-based service;

retrieve, for each customer in the list of customers, at least one link to a customer page on the cloud-based service that represents a method for the customer to access the remote software-services offered by the cloud-based service;

analyze each identified customer page for at least one risk factor;

calculate, based on the analysis, a risk score for the service that represents an overall estimation of security risks to client organizations that utilize the cloud-based service.

20. The non-transitory computer-readable medium of claim 19 , wherein the one or more computer-readable instructions cause the computing device to analyze the customer page for risk factors by determining that the customer page comprises at least one of:

a telephone number;

an e-mail address;

a link to an additional customer page that represents an additional method for the customer to access additional remote software-services offered by the cloud-based service;

a link to an alternate customer page on an additional cloud-based service;

information that has been determined to be sensitive by the customer associated with the customer page;

a form of encryption used by the customer page.