DATA SECURITY RISKS EVALUATION FOR THREAT DETECTION
A data risk value for data of an endpoint may be determined. An endpoint risk value for the endpoint may be determined. A channel risk value for a set of channels through which the data is conveyable by the endpoint may be determined. A data security risk value may be determined based on the data risk value, the endpoint risk value, and the channel risk value.
1 . A system for evaluating data security risks, the system comprising:
one or more processors; and
a memory storing instructions that, when executed by the one or more processors, cause the system to perform:
determining a data risk value for data of an endpoint based on a number of classified files within the data and a type of classified files within the data;
determining an endpoint risk value for the endpoint based on a user risk value and a cyber security risk value;
determining a channel risk value for a set of channels through which the data is conveyable by the endpoint based on a number of channels within the set of channels and a type of channels within the set of channels; and
determining a data security risk value based on the data risk value, the endpoint risk value, and the channel risk value.
2 . The system of claim 1 , wherein:
the user risk value is determined based on a user behavior associated with the data or the endpoint;
the cyber security risk value is determined based on a number of vulnerabilities of the endpoint; and
the data security risk value is a product of the data risk value, the endpoint risk value, and the channel risk value.
3 . A system for evaluating data security risks, the system comprising:
one or more processors; and
a memory storing instructions that, when executed by the one or more processors, cause the system to perform:
determining a data risk value for data of an endpoint;
determining an endpoint risk value for the endpoint;
determining a channel risk value for a set of channels through which the data is conveyable by the endpoint; and
determining a data security risk value based on the data risk value, the endpoint risk value, and the channel risk value.
4 . The system of claim 3 , wherein the data risk value is determined based on a number of classified files within the data.
5 . The system of claim 4 , wherein the data risk value is determined further based on a type of classified files within the data.
6 . The system of claim 5 , wherein the endpoint risk value is determined based on a user risk value and a cyber security risk value.
7 . The system of claim 6 , wherein the user risk value is determined based on a user behavior associated with the data or the endpoint.
8 . The system of claim 7 , wherein the cyber security risk value is determined based on a number of vulnerabilities of the endpoint.
9 . The system of claim 8 , wherein the channel risk value is determined based on a number of channels within the set of channels.
10 . The system of claim 9 , wherein the channel risk value is determined further based on a type of channels within the set of channels.
11 . The system of claim 10 , wherein the data security risk value is a product of the data risk value, the endpoint risk value, and the channel risk value.
12 . A method for evaluating data security risks, the method comprising:
determining a data risk value for data of an endpoint;
determining an endpoint risk value for the endpoint;
determining a channel risk value for a set of channels through which the data is conveyable by the endpoint; and
determining a data security risk value based on the data risk value, the endpoint risk value, and the channel risk value.
13 . The method of claim 12 , wherein the data risk value is determined based on a number of classified files within the data.
14 . The method of claim 13 , wherein the data risk value is determined further based on a type of classified files within the data.
15 . The method of claim 14 , wherein the endpoint risk value is determined based on a user risk value and a cyber security risk value.
16 . The method of claim 15 , wherein the user risk value is determined based on a user behavior associated with the data or the endpoint.
17 . The method of claim 16 , wherein the cyber security risk value is determined based on a number of vulnerabilities of the endpoint.
18 . The method of claim 17 , wherein the channel risk value is determined based on a number of channels within the set of channels.
19 . The method of claim 18 , wherein the channel risk value is determined further based on a type of channels within the set of channels.
20 . The method of claim 19 , wherein the data security risk value is a product of the data risk value, the endpoint risk value, and the channel risk value.