Systems and methods for normalizing data store classification information
The disclosed computer-implemented method for normalizing data store classification information may include (1) receiving, at the computing device, classification information from multiple data store content classification sources, (2) training a continuous bag of words (CBOW) classification model with the classification information, (3) receiving a classification tag from a data store for which respectively stored data is classified by one of the data store content classification sources, and (4) classifying, with the trained CBOW classification model, the received classification tag to a corresponding command tag, wherein the command tag represents a meaning of the classification tag. Various other methods, systems, and computer-readable media are also disclosed.
1. A computer-implemented method for normalizing data store classification information, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:
receiving, at the computing device, classification information from multiple different data store content classification sources;
training a continuous bag of words (CBOW) classification model with the classification information;
receiving a classification tag from a data store, wherein the classification tag indicates a classification of respectively stored data that is classified by one of the data store content classification sources, wherein the one of the data store content classification sources comprises a set including a plurality of different sensitivity levels;
classifying, automatically and with the trained CBOW classification model, the received classification tag to a corresponding command tag in a uniform tag set, wherein the command tag represents a meaning of the classification tag, wherein the command tag further indicates a presence or absence of personally identifiable information (PII), and wherein the classification tag is normalized to the corresponding command tag as the presence of the PII based on a first subset of the plurality of different sensitivity levels and the absence of the PII based on a second subset of the plurality of information sensitivity levels;
identifying, in response to classifying the received classification tag to the corresponding command tag, a potential security risk; and
performing, in response to identifying the potential security risk, a security action in an attempt to ameliorate the potential security risk, wherein the security action comprises limiting access to the data store based on each of the plurality of different sensitivity levels.
2. The computer-implemented method of claim 1 , wherein the classification information comprises a tag and a ruleset.
3. The computer-implemented method of claim 1 , further comprising storing the classification information in a storage device.
4. The computer-implemented method of claim 1 , wherein the classification sources comprise at least one of:
an automatic classification source configured to classify stored data;
a manual classification source; and
a third-party classifier configured to classify stored data.
5. The computer-implemented method of claim 1 , further comprising generating, in response to classifying the received classification tag to the corresponding command tag, a report.
6. The computer-implemented method of claim 5 , further comprising sending the report to a user display.
7. The computer-implemented method of claim 5 , further comprising sending the report via a network device.
8. The computer-implemented method of claim 1 , further comprising:
receiving a different classification tag; and
classifying the different classification tag with the trained CBOW classification model to the corresponding command tag, wherein the command tag represents a meaning of the different classification tag.
9. The computer-implemented method of claim 1 , further comprising:
receiving, from the data store, tag data corresponding to data stored on the data store;
converting, using the trained CBOW classification model, the tag data to command tag data; and
generating a report from the command tag data.
10. The computer-implemented method of claim 1 , further comprising:
mapping the classification tag to the corresponding command tag; and
storing the mapping in a storage device.
11. The computer-implemented method of claim 10 , further comprising:
receiving the classification tag again; and
classifying, using the mapping, the classification tag to the corresponding command tag.
12. The computer-implemented method of claim 1 , wherein the respectively stored data is a file.
13. A system for normalizing data store classification information, the system comprising:
a first receiving module, stored in a memory, that receives, at the system, classification information from multiple different data store content classification sources;
a training module, stored in the memory, that trains a continuous bag of words (CBOW) classification model with the classification information;
a second receiving module, stored in the memory, that receives a classification tag from a data store, wherein the classification tag indicates a classification of respectively stored data that is classified by one of the data store content classification sources, wherein the one of the data store content classification sources comprises a set including a plurality of different sensitivity levels;
a classifying module, stored in the memory, that automatically classifies, with the trained CBOW classification model, the received classification tag to a corresponding command tag in a uniform tag set, wherein the command tag represents a meaning of the classification tag, wherein the command tag further indicates a presence or absence of personally identifiable information (PII), and wherein the classification tag is normalized to the corresponding command tag as the presence of the PII based on a first subset of the plurality of different sensitivity levels and the absence of the PII based on a second subset of the plurality of information sensitivity levels, wherein the classifying module further:
identifies, in response to classifying the received classification tag to the corresponding command tag, a potential security risk; and
performs, in response to identifying the potential security risk, a security action in an attempt to ameliorate the potential security risk, wherein the security action comprises limiting access to the data store based on each of the plurality of different sensitivity levels; and
at least one physical processor that executes the first receiving module, the training module, the second receiving module, and the classifying module.
14. The system of claim 13 , wherein the classification information comprises a tag and a ruleset.
15. The system of claim 13 , wherein the respectively stored data is a file.
16. The system of claim 13 , wherein the classification sources comprise at least one of:
an automatic classification source configured to classify stored data;
a manual classification source; and
a third-party classifier configured to classify stored data.
17. A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:
receive, at the computing device, classification information from multiple different data store content classification sources;
train a continuous bag of words (CBOW) classification model with the classification information;
receive a classification tag from a data store, wherein the classification tag indicates a classification of respectively stored data that is classified by one of the data store content classification sources, wherein the one of the data store content classification sources comprises a set including a plurality of different sensitivity levels;
classify, automatically and with the trained CBOW classification model, the received classification tag to a corresponding command tag in a uniform tag set, wherein the command tag represents a meaning of the classification tag, wherein the command tag further indicates a presence or absence of personally identifiable information (PII), and wherein the classification tag is normalized to the corresponding command tag as the presence of the PII based on a first subset of the plurality of different sensitivity levels and the absence of the PII based on a second subset of the plurality of information sensitivity levels;
identifying, in response to classifying the received classification tag to the corresponding command tag, a potential security risk; and
performing, in response to identifying the potential security risk, a security action in an attempt to ameliorate the potential security risk, wherein the security action comprises limiting access to the data store based on each of the plurality of different sensitivity levels.
18. The non-transitory computer-readable medium of claim 17 , wherein the classification information comprises a tag and a ruleset.
19. The non-transitory computer-readable medium of claim 17 , wherein the respectively stored data is a file.
20. The non-transitory computer-readable medium of claim 17 , wherein the classification sources comprise at least one of:
an automatic classification source configured to classify stored data;
a manual classification source; and
a third-party classifier configured to classify stored data.