SENSITIVE DATA PROTECTION
Embodiments provide a sensitive data protection system for protecting sensitive data by augmenting one or more computer program portions to secure sensitive data associated with the one or more computer program portions. Embodiments include parsing one or more computer program code portions to identify one or more sensitive data portions, where the one or more sensitive data portions are associated with one or more respective sensitive data categories. Embodiments also include transforming the one or more computer program code portions into one or more respective secured data types such that the one or more sensitive data portions associated with the one or more respective secured data types are secured against unauthorized access by one or more third-party computer applications, web applications, services, end users, enterprises, and/or other third-party entities.
1 . A computer-implemented method, the computer-implemented method comprising:
parsing one or more computer program code portions to identify one or more sensitive data portions, wherein the one or more sensitive data portions are associated with one or more respective sensitive data categories; and
transforming the one or more computer program code portions into one or more respective secured data types such that the one or more sensitive data portions associated with the one or more respective secured data types are secured against unauthorized access by one or more computer applications.
2 . The computer-implemented method of claim 1 , wherein parsing the one or more computer program code portions to identify the one or more sensitive data portions further comprises:
casting the one or more computer program code portions associated with the one or more sensitive data portions into an intermediary alias data type.
3 . The computer-implemented method of claim 2 , wherein transforming the one or more computer program code portions into the one or more respective secured data types further comprises:
ranking, based on a predicted data sensitivity score, each of the one or more computer program code portions that were cast into the intermediary alias data type; and
determining, based the respective predicted data sensitivity scores, whether the one or more computer program code portions that were cast into the intermediary alias data type satisfy a predicted data sensitivity score threshold; and
in response to determining that the one or more computer program code portions satisfy the predicted data sensitivity score threshold:
transforming, the one or more computer program code portions into the one or more respective secured data types.
4 . The computer-implemented method of claim 1 , wherein the one or more sensitive data portions are used in one or more computer program functions that perform at least one of outputting data related to the one or more sensitive data portions, logging data related to the one or more sensitive data portions, mutating data related to the one or more sensitive data portions, or compiling metrics associated with the one or more sensitive data portions.
5 . The computer-implemented method of claim 1 , wherein the one or more respective sensitive data categories comprise at least one of user generated content (UGC), personally identifiable information (PII), application usage related data, security related data, enterprise related data, or commerce related data.
6 . The computer-implemented method of claim 1 , wherein the one or more respective secured data types are associated with at least one of one or more respective primitive data types or array types.
7 . The computer-implemented method of claim 1 , the computer-implemented method further comprising:
executing one or more redaction functions, wherein executing the one or more redaction functions causes the one or more sensitive data portions associated with the one or more respective secured data types to become accessible by the one or more computer applications.
8 . The computer-implemented method of claim 1 , wherein the one or more secured data types are configured to make the one or more respective sensitive data portions inaccessible to one or more programming functions associated with one or more programming libraries.
9 . An apparatus, the apparatus comprising:
at least one processor; and
at least one memory storing instructions that, when executed by the at least one processor, cause the apparatus to:
parse one or more computer program code portions to identify one or more sensitive data portions, wherein the one or more sensitive data portions are associated with one or more respective sensitive data categories; and
transform the one or more computer program code portions into one or more respective secured data types such that the one or more sensitive data portions associated with the one or more respective secured data types are secured against unauthorized access by one or more computer applications.
10 . The apparatus of claim 9 , wherein the instructions to parse the one or more computer program code portions to identify the one or more sensitive data portions further comprise instructions that cause the apparatus to:
cast the one or more computer program code portions associated with the one or more sensitive data portions into an intermediary alias data type.
11 . The apparatus of claim 10 , wherein the instructions to transform the one or more computer program code portions into the one or more respective secured data types further comprise instructions that cause the apparatus to:
rank, based on a predicted data sensitivity score, each of the one or more computer program code portions that were cast into the intermediary alias data type; and
determine, based the respective predicted data sensitivity scores, whether the one or more computer program code portions that were cast into the intermediary alias data type satisfy a predicted data sensitivity score threshold; and
in response to determining that the one or more computer program code portions satisfy the predicted data sensitivity score threshold:
transform, the one or more computer program code portions into the one or more respective secured data types.
12 . The apparatus of claim 9 , wherein the one or more sensitive data portions are used in one or more computer program functions that perform at least one of outputting data related to the one or more sensitive data portions, logging data related to the one or more sensitive data portions, mutating data related to the one or more sensitive data portions, or compiling metrics associated with the one or more sensitive data portions.
13 . The apparatus of claim 9 , wherein the one or more respective sensitive data categories comprise at least one of user generated content (UGC), personally identifiable information (PII), application usage related data, security related data, enterprise related data, or commerce related data.
14 . The apparatus of claim 9 , wherein the one or more respective secured data types are associated with at least one of one or more respective primitive data types or array types.
15 . The apparatus of claim 9 , wherein the instructions further cause the apparatus to:
execute one or more redaction functions, wherein executing the one or more redaction functions causes the one or more sensitive data portions associated with the one or more respective secured data types to become accessible by the one or more computer applications.
16 . The apparatus of claim 9 , wherein the one or more secured data types are configured to make the one or more respective sensitive data portions inaccessible to one or more programming functions associated with one or more programming libraries.
17 . A non-transitory computer-readable storage medium, the non-transitory computer-readable storage medium including instructions that when executed by at least one processor cause the at least one processor to:
parse one or more computer program code portions to identify one or more sensitive data portions, wherein the one or more sensitive data portions are associated with one or more respective sensitive data categories; and
transform the one or more computer program code portions into one or more respective secured data types such that the one or more sensitive data portions associated with the one or more respective secured data types are secured against unauthorized access by one or more computer applications.
18 . The non-transitory computer-readable storage medium of claim 17 , wherein the instructions to parse the one or more computer program code portions to identify the one or more sensitive data portions further comprise instructions that cause the at least one processor to:
cast the one or more computer program code portions associated with the one or more sensitive data portions into an intermediary alias data type.
19 . The non-transitory computer-readable storage medium of claim 18 , wherein the instructions to transform the one or more computer program code portions into the one or more respective secured data types further comprise instructions that cause the at least one processor to:
rank, based on a predicted data sensitivity score, each of the one or more computer program code portions that were cast into the intermediary alias data type; and
determine, based the respective predicted data sensitivity scores, whether the one or more computer program code portions that were cast into the intermediary alias data type satisfy a predicted data sensitivity score threshold; and
in response to determining that the one or more computer program code portions satisfy the predicted data sensitivity score threshold:
transform, the one or more computer program code portions into the one or more respective secured data types.
20 . The non-transitory computer-readable storage medium of claim 17 , wherein the one or more sensitive data portions are used in one or more computer program functions that perform at least one of outputting data related to the one or more sensitive data portions, logging data related to the one or more sensitive data portions, mutating data related to the one or more sensitive data portions, or compiling metrics associated with the one or more sensitive data portions.