Systems and methods for computing a risk score for stored information
The disclosed computer-implemented method for computing a risk score for stored information may include (1) extracting factor-specific information from metadata describing characteristics of files stored on multiple storage devices, (2) assigning at least one respective factor score to at least one respective factor based at least in part on the factor-specific information, and (3) calculating the risk score from the at least one factor score. Various other methods, systems, and computer-readable media are also disclosed.
1. A computer-implemented method for computing a risk score for stored information, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:
extracting, automatically by an extracting module of the computing device, factor-specific information from file metadata, wherein the file metadata describes characteristics of respective files stored on multiple storage devices;
assigning at least one respective factor score to at least one respective factor based at least in part on the factor-specific information, wherein the at least one respective factor comprises a factor indicating permission distance between multiple categories of users who are permitted to access a respective file in the respective files;
calculating the risk score from the at least one factor score; and
automatically limiting access to a sensitive file having a high risk score and that is in the files stored on the multiple storage devices.
2. The computer-implemented method of claim 1 , wherein the file metadata associated with at least one of the files indicates at least one of:
a file identifier;
a file access attempt history;
a file location;
a file size; and
a presence of sensitive information in the file.
3. The computer-implemented method of claim 1 , wherein the at least one respective factor further comprises a factor indicating sensitivity of information in the respective file.
4. The computer-implemented method of claim 1 , wherein the at least one respective factor further comprises:
a factor indicating a percentage of total information, in a respective file, having at least a minimum level of sensitivity;
a factor indicating a percentage of total users who are permitted to access the respective file;
a factor indicating a percentage of total users who are permitted to access sensitive files;
a factor indicating a percentage of unique tags associated with the respective file;
a factor indicating a percentage of highly sensitive files in a plurality of sensitive files;
a factor indicating an average number of instances of patterns per sensitive file;
a factor indicating a location of the respective file;
a factor indicating characteristics of a control point;
a factor indicating a type of data source associated with the respective file; and
a factor indicating a level of security for the storage device storing the respective file.
5. The computer-implemented method of claim 1 , wherein calculating further comprises adding respective factor scores for different factors.
6. The computer-implemented method of claim 1 , wherein calculating further comprises weighting the at least one factor score with a respective weight.
7. The computer-implemented method of claim 6 , further comprising receiving the respective weight from a user interface.
8. The computer-implemented method of claim 1 , wherein the at least one respective factor is in a plurality of factors having respective factor scores and calculating further comprises:
weighting the respective factor scores with respective weights to form respective weighted factor scores;
adding the respective weighted factor scores; and
dividing the sum of the respective weighted factor scores by a total number of factors in the plurality of factors.
9. The computer-implemented method of claim 1 , wherein calculating the risk score comprises calculating the risk score for at least one of a file, a directory, and a storage device.
10. The computer-implemented method of claim 1 , further comprising performing an action on an additional file in response to a value of the risk score.
11. The computer-implemented method of claim 10 , wherein the action comprises modifying a permission to access the additional file.
12. The computer-implemented method of claim 1 , further comprising displaying, on a user display, the risk score.
13. The computer-implemented method of claim 1 , further comprising sending information describing the risk score via a network interface.
14. A system for computing a risk score for stored information, the system comprising:
an extracting module, stored in a memory device, that is configured to cause at least one physical processor to automatically extract factor-specific information from file metadata, wherein the file metadata describes characteristics of respective files stored on multiple storage devices;
an assigning module, stored in the memory device, that assigns at least one respective factor score to at least one respective factor based at least in part on the factor-specific information, wherein the at least one respective factor comprises a factor indicating permission distance between multiple categories of users who are permitted to access a respective file in the respective files;
a calculating module, stored in the memory device, that calculates the risk score from the at least one factor score and automatically limits access to a sensitive file having a high risk score and that is in the files stored on the multiple storage devices; and
the at least one physical processor that executes the extracting module, the assigning module, and the calculating module.
15. The system of claim 14 , wherein the at least one respective factor further comprises a factor indicating sensitivity of information in the respective file.
16. The system of claim 14 , wherein the at least one respective factor further comprises:
a factor indicating a percentage of total information, in a respective file, having at least a minimum level of sensitivity;
a factor indicating a percentage of total users who are permitted to access the respective file;
a factor indicating a percentage of total users who are permitted to access sensitive files;
a factor indicating a percentage of unique tags associated with the respective file;
a factor indicating a percentage of highly sensitive files in a plurality of sensitive files;
a factor indicating an average number of instances of patterns per sensitive file;
a factor indicating a location of the respective file;
a factor indicating characteristics of a control point;
a factor indicating a type of data source associated with the respective file; and
a factor indicating a level of security for the storage device storing the respective file.
17. The system of claim 14 , wherein the at least one respective factor is in a plurality of factors having respective factor scores and calculating the risk score further comprises:
weighting the respective factor scores with respective weights to form respective weighted factor scores;
adding the respective weighted factor scores; and
dividing the sum of the respective weighted factor scores by a total number of factors in the plurality of factors.
18. A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:
extract factor-specific information from file metadata, wherein the file metadata describes characteristics of respective files stored on multiple storage devices;
assign at least one respective factor score to at least one respective factor based at least in part on the factor-specific information, wherein the at least one respective factor comprises a factor indicating permission distance between multiple categories of users who are permitted to access a respective file in the respective files;
calculate a risk score from the at least one factor score; and
automatically limit access to a sensitive file having a high risk score and that is in the files stored on the multiple storage devices.
19. The non-transitory computer-readable medium of claim 18 , wherein the at least one respective factor further comprises a factor indicating sensitivity of information in the respective file.
20. The non-transitory computer-readable medium of claim 18 , wherein the at least one respective factor further comprises:
a factor indicating a percentage of total information, in a respective file, having at least a minimum level of sensitivity;
a factor indicating a percentage of total users who are permitted to access the respective file;
a factor indicating a percentage of total users who are permitted to access sensitive files;
a factor indicating a percentage of unique tags associated with the respective file;
a factor indicating a percentage of highly sensitive files in a plurality of sensitive files;
a factor indicating an average number of instances of patterns per sensitive file;
a factor indicating a location of the respective file;
a factor indicating characteristics of a control point;
a factor indicating a type of data source associated with the respective file; and
a factor indicating a level of security for the storage device storing the respective file.
21. The computer-implemented method of claim 1 , wherein the categories of users in the multiple categories are organization subdivisions.