Security device selection based on secure content detection
Methods and systems for performing secure device selection based on sensitive content detection are described herein. The methods and systems may analyze content being accessed via a virtual session established with a first device to determine that at least a portion of the content is sensitive content, determine information indicating one or more security features of the first device and one or more security features of a second device associated with a user of the first device, determine, based on the information, that the second device is more secure than the first device, and, responsive to the determination that the second device is more secure than the first device, transfer the virtual session to the second device or enter a more secure configuration of the first device.
1. A method performed by an enterprise mobility management system, the method comprising:
analyzing content being accessed via a virtual session established with a first device to determine that at least a portion of the content is sensitive content;
determining information indicating one or more security features of the first device and one or more security features of a second device associated with a user of the first device, the one or more security features of the first device indicative of whether the first device is in a secure environment, and the one or more security features of a second device indicative of whether the second device is in a secure environment;
determining, based on the information, that the second device is more secure than the first device; and
responsive to the determination that the second device is more secure than the first device, transferring the virtual session from the first device to the second device.
2. The method of claim 1 , wherein the determining that the second device is more secure than the first device comprises:
generating security scores for the first device and the second device; and
ranking the first device and the second device based on the corresponding security scores.
3. The method of claim 1 , wherein the determining that the second device is more secure than the first device comprises comparing a location of the first device to a location of the second device.
4. The method of claim 1 , further comprising:
after determining that at least a portion of the content is sensitive content, transmitting, to the first device, an indication that the content is sensitive content.
5. The method of claim 4 , wherein the indication that the content is sensitive content comprises a sensitivity score.
6. The method of claim 4 , wherein the indication that the content is sensitive content causes the first device to display an indication that the virtual session contains sensitive content.
7. The method of claim 4 , wherein the indication that the content is sensitive content causes the first device to block display of the sensitive content.
8. The method of claim 1 , further comprising:
after the transferring of the virtual session to the second device, analyzing content being accessed via the virtual session transferred to the second device to determine that the content is not sensitive content; and
transferring the virtual session back to the first device.
9. A method performed by an enterprise mobility management system, the method comprising:
analyzing content being accessed via a virtual session established with a first device to determine that at least a portion of the content is sensitive content;
determining information indicating one or more security features of the first device and one or more security features of a second device associated with a user of the first device;
determining, based on the information, that the second device is more secure than the first device; and
responsive to the determination that the second device is more secure than the first device, transferring the virtual session to the second device;
wherein the information indicating one or more security features of the first device comprises one or more of:
a screen size of the first device;
whether the first device usually connects via a secured network;
whether the first device requires two-factor authentication to log in;
the current location of the first device;
a type of network being used by the first device;
whether an external display is connected to the first device;
whether peripheral devices are connected to the first device;
whether the user is currently using the first device;
whether other users are logged in to the first device; and
whether other users are currently looking at a display of the first device.
10. A sensitive content management system comprising:
one or more processors; and
memory storing non-transitory computer-readable instructions that, when executed by the one or more processors, cause the sensitive content management system to:
analyze content being accessed via a virtual session established with a first device to determine that at least a portion of the content is sensitive content;
determine information indicating one or more security features of the first device and one or more security features of a second device associated with a user of the first device, the one or more security features of the first device indicative of whether the first device is in a secure environment, and the one or more security features of a second device indicative of whether the second device is in a secure environment;
determine, based on the information, that the second device is more secure than the first device; and
responsive to the determination that the second device is more secure than the first device, transfer the virtual session to the second device.
11. The sensitive content management system of claim 10 , wherein, to determine that the second device is more secure than the first device, the instructions, when executed, further cause the sensitive content management system to:
generate security scores for the first device and the second device; and
rank the first device and the second device based on the corresponding security scores.
12. The sensitive content management system of claim 10 , wherein, to determine that the second device is more secure than the first device, the instructions, when executed, further cause the sensitive content management system to compare a location of the first device to a location of the second device.
13. The sensitive content management system of claim 10 , wherein the instructions, when executed, further cause the sensitive content management system to:
after determining that at least a portion of the content is sensitive content, transmit, to the first device, an indication that the content is sensitive content.
14. The sensitive content management system of claim 13 , wherein the indication that the content is sensitive content comprises a sensitivity score.
15. The sensitive content management system of claim 13 , wherein the indication that the content is sensitive content causes the first device to display an indication that the virtual session contains sensitive content.
16. The sensitive content management system of claim 13 , wherein the indication that the content is sensitive content causes the first device to block display of the sensitive content.
17. The sensitive content management system of claim 10 , wherein the instructions, when executed, further cause the sensitive content monitoring system to:
after transferring the virtual session to the second device, analyze content being accessed via the virtual session transferred to the second device to determine that the content is not sensitive content; and
transfer the virtual session back to the first device.
18. The sensitive content management system of claim 10 , wherein the information indicating one or more security features of the first device comprises one or more of:
a screen size of the first device;
whether the first device usually connects via a secured network;
whether the first device requires two-factor authentication to log in;
the current location of the first device;
a type of network being used by the first device;
whether an external display is connected to the first device;
whether peripheral devices are connected to the first device;
whether the user is currently using the first device;
whether other users are logged in to the first device; and
whether the other users are currently looking at a display of the first device.
19. One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors of a device, cause the device to:
analyze content being accessed via a virtual session established with a first device to determine that at least a portion of the content is sensitive content;
determine information indicating one or more security features of the first device and one or more security features of a second device associated with a user of the first device, the one or more security features of the first device indicative of whether the first device is in a secure environment, and the one or more security features of a second device indicative of whether the second device is in a secure environment;
determine, based on the information, that the second device is more secure than the first device; and
responsive to the determination that the second device is more secure than the first device, transfer the virtual session to the second device.
20. The one or more non-transitory computer-readable media of claim 19 , wherein, to determine that the second device is more secure than the first device, the instructions, when executed, further cause the device to:
after transferring the virtual session to the second device, analyze content being accessed via the virtual session transferred to the second device to determine that the content is not sensitive content; and
transfer the virtual session back to the first device.