Cloud system providing data protection of data in a SaaS or cloud provider
A method performed by a cloud system includes, subsequent to the cloud system connecting to one of a cloud provider and a Software-as-a-Service (SaaS) application, scanning data stored therein for one or more users associated with a tenant of a plurality of tenants of the cloud system; detecting an incident in the data during the scanning; maintaining details of the incident in an in-memory data store; and providing a notification to the tenant of the incident.
1. A method performed by a cloud system, the method comprising steps of:
subsequent to the cloud system connecting to one of a cloud provider and a Software-as-a-Service (SaaS) application, scanning data stored therein for one or more users associated with a tenant of a plurality of tenants of the cloud system;
detecting an incident in the data during the scanning;
maintaining details of the incident in an in-memory data store; and
providing a notification to the tenant of the incident.
2. The method of claim 1 , wherein the steps further include:
subsequent to the incident and while the data is being modified, updating the details of the incident in the in-memory data store.
3. The method of claim 1 , wherein the tenant of the cloud-based system is also a tenant of the one of the cloud provider and the SaaS application.
4. The method of claim 1 , wherein the cloud-based system is separate from the one of the cloud provider and the SaaS application.
5. The method of claim 4 , wherein the cloud-based system connects to the one of the cloud provider and the SaaS application via an Application Programming Interface (API).
6. The method of claim 1 , wherein the incident relates to data loss for the tenant based on one or more of a standard dictionary for all of the plurality of tenants and a custom dictionary for the tenant.
7. The method of claim 1 , wherein the incident relates to the threat which is one of a plurality of threats which are maintained and updated in real-time in the cloud-based system.
8. The method of claim 7 , wherein the plurality of threats include any of malware, spyware, viruses, command-and-control, phishing, cross-site scripting, and bots.
9. The method of claim 1 , wherein the steps further include:
receiving updates for the scanning associated with the tenant in the cloud system.
10. The method of claim 1 , wherein the steps further include:
providing both real-time notifications and aggregated reports to the tenant of any detected incidents.
11. A cloud system comprising one or more processors configured to implement steps of:
subsequent to the cloud system connecting to one of a cloud provider and a Software-as-a-Service (SaaS) application, scanning data stored therein for one or more users associated with a tenant of a plurality of tenants of the cloud system;
detecting an incident in the data during the scanning;
maintaining details of the incident in an in-memory data store; and
providing a notification to the tenant of the incident.
12. The cloud system of claim 11 , wherein the steps further include:
subsequent to the incident and while the data is being modified, updating the details of the incident in the in-memory data store.
13. The cloud system of claim 11 , wherein the tenant of the cloud-based system is also a tenant of the one of the cloud provider and the SaaS application.
14. The cloud system of claim 11 , wherein the cloud-based system is separate from the one of the cloud provider and the SaaS application.
15. The cloud system of claim 14 , wherein the cloud-based system connects to the one of the cloud provider and the SaaS application via an Application Programming Interface (API).
16. The cloud system of claim 11 , wherein the incident relates to data loss for the tenant based on one or more of a standard dictionary for all of the plurality of tenants and a custom dictionary for the tenant.
17. The cloud system of claim 11 , wherein the incident relates to the threat which is one of a plurality of threats which are maintained and updated in real-time in the cloud-based system.
18. The cloud system of claim 17 , wherein the plurality of threats include any of malware, spyware, viruses, command-and-control, phishing, cross-site scripting, and bots.
19. The cloud system of claim 11 , wherein the steps further include:
receiving updates for the scanning associated with the tenant in the cloud system.
20. The cloud system of claim 11 , wherein the steps further include:
providing both real-time notifications and aggregated reports to the tenant of any detected incidents.