Methods and systems for prevention of vendor data abuse

1. A computerized method for automatically identifying and solving for vendor data abuse in an enterprise network, comprising:

implementing a vendor detection at one or more gateways of the enterprise network;

mapping a set of data along with any associated data attributes of the set of data that are being shared with a vendor via the one or more gateways;

detecting and identifying an access anomaly with respect to the set of data associated with a vendor access; and

implementing a specified data minimization process to the access anomaly,

wherein the data minimization process is applied for every vendor sharing agreement engaged in by the enterprise network that is associated with the vendor, and

wherein data minimization is implemented by prohibiting a vendor access to any sensitive data in the enterprise network.

2. The computerized method of claim 1 , wherein the data minimization processes comprises setting a limit to a use or a retention of the set of data by limiting a data collected by protocol elements to only what is necessary.

3. The computerized method of claim 1 , wherein data minimization is implemented by:

limiting data collection by the vendor.

4. The computerized method of claim 3 , wherein data minimization is implemented by:

detecting and identifying a violated data minimization scenario committed by the vendor.

5. The computerized method of claim 4 further comprising:

communicating the violated data minimization scenario to the enterprise network.

6. The computerized method of claim 1 , wherein the step of implementing the vendor detection at the one or more gateways of the enterprise network further comprises:

identifying the vendor based on an API endpoint data, an API path data, a location data, and a region information data; and

fingerprinting a request and a header information from every vendor.

7. The computerized method of claim 6 , wherein the step of implementing the vendor detection at the one or more gateways of the enterprise network further comprises:

building an abnormal access list with respect to an API path and a content of an API for a vendor API key; and

fingerprinting an API endpoint exposed by the vendor.

8. The computerized method of claim 7 , further comprising:

fingerprinting a method type to obtain a vendor identification; and

associating the fingerprinted method type with at least one API call from or to the enterprise network.

9. A computer system for automatically identifying and solving for vendor data abuse in an enterprise network, comprising:

a processor;

a memory containing instructions when executed on the processor, causes the processor to perform operations that:

implement a vendor detection at one or more gateways of the enterprise network;

map a set of data along with any associated data attributes of the set of data that are being shared with a vendor via the one or more gateways;

detect and identify an access anomaly with respect to the set of data associated with a vendor access; and

implement a specified data minimization process to the access anomaly wherein the data minimization process is applied for every vendor sharing agreement engaged in by the enterprise network that is associated with the vendor,

wherein data minimization is implemented by prohibiting a vendor access to any sensitive data in the enterprise network, and

wherein the step of implementing the vendor detection at the one or more gateways of the enterprise network further comprises:

implementing a match based on a vendor provided Internet Protocol (IP) identifier;

if no match is found, then identifying the vendor based on an API endpoint data, an API path data, a location data, and a region information data; and

fingerprinting a request and a header information from every vendor.

10. A computerized method for determining abnormal vendor access:

fingerprinting a vendor behavior of a vendor and setting a normal fingerprint of the vendor behavior;

analyzing an abnormal vendor access based on access frequency of the vendor;

detecting that a vendor access has a different access frequency or a random-access frequency over a specified period of time;

setting a vendor abuse risk associated with the different access frequency or the random-access frequency over a specified period of time as high;

when the vendor abuse risk is set as high, determining that an abnormal access method is extant; and

disabling any vendor access permissions of the vendor associated with an abnormal vendor access frequency,

determines a new personal information (PII) type or PII data being transferred via a gateway in an enterprise network;

detecting that the vendor is consuming the new PII types or PII data; and

disabling any vendor access permissions of the vendor when it is detected that the vendor is consuming the new PII types or PII data;

detecting a critical PII type data is being transferred to the vendor; and

disabling any vendor access permissions of the vendor when it is detected that the vendor is receiving the critical PII type data; and

implementing vendor detection at the gateway of the enterprise network comprising:

implementing a match based on a vendor provided Internet Protocol (IP) identifier;

if no match is found, then identifying the vendor based on an API endpoint data, an API path data, a location data, and a region information data; and

fingerprinting a request and a header information from every vendor.

11. The computerized method of claim 10 , further comprising:

detecting an abnormal request response pattern when the vendor passes a different request pattern than the normal fingerprint;

disabling any vendor access permissions of the vendor associated with the abnormal request response pattern.

12. The computerized method of claim 10 , wherein the critical PII type data comprises a social security number (SSN) or a medical record number (MRN).