Securing sensitive user data stored locally by an application

1. An apparatus, comprising:

a memory element operable to store instructions; and

a processor operable to execute the instructions, such that the apparatus is configured to:

identify sensitive user data stored in the memory by a first application by searching unencrypted and encrypted user data stored by the first application, wherein the first application is a web based application or a web browser;

determine a risk exposure score for the sensitive user data;

apply, based on a determination that the risk exposure score is above a threshold, a security policy to restrict access to the sensitive user data;

receive a request from a second application to access the sensitive user data;

determine whether the first application and the second application are similar applications; and

allow access based on a determination that the first application and the second application are similar applications.

2. The apparatus of claim 1 , further configured to:

deny access based on a determination that the first application and the second application are not similar applications.

3. The apparatus of claim 1 , wherein the first application and the second application are web browsers.

4. The apparatus of claim 1 , wherein the risk exposure score is determined based on a type of sensitive user data stored and an amount of sensitive user data stored.

5. The apparatus of claim 4 , wherein the risk exposure score is determined by assigning a risk value to the type of sensitive user data stored and summing the risk values of the sensitive user data.

6. The apparatus of claim 1 , wherein the security policy includes encrypting the sensitive user data.

7. The apparatus of claim 1 , further configured to:

inspect the sensitive user data; and

determine whether to recommend a corrective action.

8. The apparatus of claim 7 , wherein determining whether to recommend a corrective action includes decrypting the sensitive user data and identifying whether a first password and a second password are a same password.

9. The apparatus of claim 7 , wherein determining whether to recommend a corrective action includes identifying that a password has not been changed within a defined time period.

10. The apparatus of claim 1 , further configured to:

determine whether the second application is a valid application.

11. The apparatus of claim 1 , wherein the encrypted user data is decrypted before it is searched.

12. At least one non-transitory computer-readable medium comprising one or more instructions that when executed by a processor, cause the processor to:

identify sensitive user data stored, by a first application, in memory on an electronic device by searching unencrypted and encrypted user data stored by the first application, wherein the first application is a web based application or a web browse;

determine a risk exposure score for the sensitive user data;

apply, based on a determination that the risk exposure score is above a threshold, a security policy to restrict access to the sensitive user data;

receive a request from a second application to access the sensitive user data;

determine whether the first application and the second application are similar applications; and

deny access based on a determination that the first application and the second application are not similar applications.

13. The at least one non-transitory computer-readable medium of claim 12 , further comprising one or more instructions that when executed by a processor, cause the processor to:

notify a user of the request by the second application to access the sensitive user data.

14. The at least one non-transitory computer-readable medium of claim 12 , further comprising one or more instructions that when executed by a processor, cause the processor to:

send, to a cloud server, data associated with the request by the second application to access the sensitive user data for processing to identify whether the second application includes malware;

receive, from the cloud server, processed data identifying whether the second application includes malware;

identify, based on a determination that the second application includes malware, a corrective action; and

prompt a user to take the corrective action.

15. The at least one non-transitory computer-readable medium of claim 14 , wherein the corrective action includes one or more of: deleting sensitive user data stored locally by the first application, deleting the second application, scanning the electronic device with anti-malware software, changing a password, improving a strength of a password, and making all passwords unique.

16. The at least one non-transitory computer-readable medium of claim 14 , further comprising one or more instructions that when executed by a processor, cause the processor to:

determine whether the corrective action has been taken within a defined time period; and

re-prompt, based on a determination that the corrective action has not been taken within the defined time period, the user to take the corrective action.

17. A method, comprising:

searching unencrypted and encrypted user data stored in memory of an electronic device by a first application, wherein the application is a web based application or a web browser;

identifying sensitive user data stored in the memory by the application;

determining a risk exposure score for the sensitive user data;

receiving a request from a second application to access the sensitive user data;

determining whether the first application and the second application are similar applications; and

allowing access based on a determination that the first application and the second application are similar applications.

18. The method of claim 17 , further configured to:

denying access based on a determination that the first application and the second application are not similar applications.

19. The method of claim 17 , wherein the first application and the second application are web browsers.

20. The method of claim 17 , further comprising:

applying, based on a determination that the risk exposure score is above a threshold, a security policy to restrict access to the sensitive user data.

21. The method of claim 20 , wherein the security policy includes encrypting the sensitive user data.