Systems, methods, and media for protecting client devices from insecure cloud-based storage containers
View Patent ↗Mechanisms (such as systems, methods, and media) for protecting a client device from an insecure cloud-based storage container stored on a server are provided, the mechanisms comprising: determining that content accessible by the client device is hosted in a storage container on the server; sending a message to the server to determine what security provisions are in place for the storage container; determining that the storage container is not secure; and blocking access by the client device to the storage container.
1. A system for protecting a client device from an insecure cloud-based storage container stored on a server, comprising:
a memory; and
a hardware processor couple to the memory and configured to:
determine that third-party content accessible by the client device is hosted in a third-party storage container on the server based upon a link to the third-party content being provided to the client device as part of a web page;
determine that the third-party storage container is not secure by:
sending a first message to the server that attempts to perform at least one of: writing content to the third-party storage container; editing content in the third-party storage container; and updating content on the third-party storage container; and
in response to sending the first message, determining that unauthorized personnel are able to perform at least one of: writing content to the third-party storage container; editing content in the third-party storage container; and updating content on the third-party storage container; and
block access by the client device to the third-party storage container.
2. The system of claim 1 , wherein the hardware processor is further configured to send a second message that queries an access control list of the third-party storage container.
3. The system of claim 1 , wherein the hardware processor is further configured to send a second message that queries policies of the third-party storage container.
4. The system of claim 1 , wherein the hardware processor is further configured to receive a response to the message indicating that the third-party storage container can be written to by a party other than an owner of the third-party storage container.
5. The method of claim 1 , further comprising generating an alert message that the third-party storage container is not secure.
6. A method for protecting a client device from an insecure cloud-based storage container stored on a server, comprising:
determining that third-party content accessible by the client device is hosted in a third-party storage container on the server based upon a link to the third-party content being provided to the client device as part of a web page;
determining that the third-party storage container is not secure by:
sending a first message to the server that attempts to perform at least one of: writing content to the third-party storage container; editing content in the third-party storage container; and updating content on the third-party storage container; and
in response to sending the first message, determining that unauthorized personnel are able to perform at least one of: writing content to the third-party storage container; editing content in the third-party storage container; and updating content on the third-party storage container; and
blocking access by the client device to the third-party storage container.
7. The method of claim 6 , further comprising sending a second message that queries an access control list of the third-party storage container.
8. The method of claim 6 , further comprising sending a second message that queries policies of the third-party storage container.
9. The method of claim 6 , further comprising receiving a response to the message indicating that the third-party storage container can be written to by a party other than an owner of the third-party storage container.
10. The method of claim 6 , further comprising generating an alert message that the third-party storage container is not secure.
11. A non-transitory computer-readable medium containing computer executable instructions that, when executed by a processor, cause the processor to perform a method for protecting a client device from an insecure cloud-based storage container stored on a server, the method comprising:
determining that third-party content accessible by the client device is hosted in a third-party storage container on the server based upon a link to the third-party content being provided to the client device as part of a web page;
determining that the third-party storage container is not secure by:
sending a first message to the server that attempts to perform at least one of: writing content to the third-party storage container; editing content in the third-party storage container; and updating content on the third-party storage container; and
in response to sending the first message, determining that unauthorized personnel are able to perform at least one of: writing content to the third-party storage container; editing content in the third-party storage container; and updating content on the third-party storage container; and
blocking access by the client device to the third-party storage container.
12. The non-transitory computer-readable medium of claim 11 , wherein the method further comprises sending a second message that queries an access control list of the third-party storage container.
13. The non-transitory computer-readable medium of claim 11 , wherein the method further comprises sending a second message that queries policies of the third-party storage container.
14. The non-transitory computer-readable medium of claim 11 , wherein the method further comprises receiving a response to the message indicating that the third-party storage container can be written to by a party other than an owner of the third-party storage container.
15. The non-transitory computer-readable medium of claim 11 , wherein the method further comprises generating an alert message that the third-party storage container is not secure.