Creating a machine learning policy based on express indicators
According to some embodiments, a method performed by a classification scanner comprises receiving an electronic message and determining a classification that applies to the electronic message. The classification is determined based on an express indication from a user. The method further comprises providing a machine learning trainer with the electronic message and an identification of the classification that applies to the electronic message. The machine learning trainer is adapted to determine a machine learning policy that associates attributes of the electronic message with the classification.
1. A method for creating a machine learning policy for a classification type, comprising:
receiving at least one electronic message, the at least one electronic message associated with a sender and a recipient;
determining at least one classification type that applies to the at least one electronic message, the at least one classification type determined based on at least one or more express indications associated with the message prior to a sending of the at least one electronic message to the recipient, wherein determining the at least one classification type comprises scanning the at least one electronic message based on a plurality of classification types;
providing the at least one electronic message and at least one identification of the at least one classification type that applies to the at least one electronic message to a machine learning trainer adapted to determine a machine learning policy that associates attributes of electronic messages with the at least one classification type;
receiving a second electronic message, the second electronic message comprising one or more of the attributes that the machine learning policy associates with the at least one classification type;
determining, at a classification scanner, that the at least one classification type applies to the second electronic message based on the machine learning policy; and
based on the determination, instructing, by the classification scanner, an enforcer to apply the at least one classification, wherein the application of the at least one classification comprises taking an action associated with the second electronic message based on the determination that the at least one classification type applies to the second electronic message, the action associated with the classification type.
2. The method of claim 1 , wherein the action comprises enforcing a compliance criteria.
3. The method of claim 2 , wherein the compliance criteria is associated with the machine learning policy or the classification type.
4. The method of claim 1 , wherein the machine learning policy is applicable to a domain, premise, company, or department.
5. The method of claim 4 , wherein the domain, premise, company, or department is associated with the sender or the recipient.
6. The method of claim 5 , wherein the action is specific to the domain, premise, company, or department.
7. The method of claim 6 , wherein the second electronic message is an attachment to a third electronic message.
8. A non-transitory computer readable medium, comprising instructions for:
receiving at least one electronic message, the at least one electronic message associated with a sender and a recipient;
determining at least one classification type that applies to the at least one electronic message, the at least one classification type determined based on at least one or more express indications associated with the message prior to a sending of the at least one electronic message to the recipient, wherein determining the at least one classification type comprises scanning the at least one electronic message based on a plurality of classification types;
providing the at least one electronic message and at least one identification of the at least one classification type that applies to the at least one electronic message to a machine learning trainer adapted to determine a machine learning policy that associates attributes of electronic messages with the at least one classification type;
receiving a second electronic message, the second electronic message comprising one or more of the attributes that the machine learning policy associates with the at least one classification type;
determining, at a classification scanner, that the at least one classification type applies to the second electronic message based on the machine learning policy; and
based on the determination, instructing, by the classification scanner, an enforcer to apply the at least one classification, wherein the application of the at least one classification comprises taking an action associated with the second electronic message based on the determination that the at least one classification type applies to the second electronic message, the action associated with the classification type.
9. The non-transitory computer readable medium of claim 8 , wherein the action comprises enforcing a compliance criteria.
10. The non-transitory computer readable medium of claim 9 , wherein the compliance criteria is associated with the machine learning policy or the classification type.
11. The non-transitory computer readable medium of claim 8 , wherein the machine learning policy is applicable to a domain, premise, company, or department.
12. The non-transitory computer readable medium of claim 11 , wherein the domain, premise, company, or department is associated with the sender or the recipient.
13. The non-transitory computer readable medium of claim 12 , wherein the action is specific to the domain, premise, company, or department.
14. The non-transitory computer readable medium of claim 13 , wherein the second electronic message is an attachment to a third electronic message.
15. A system for creating a machine learning policy for a classification type, comprising:
a processor; and
a non-transitory computer readable medium comprising instructions for:
receiving at least one electronic message, the at least one electronic message associated with a sender and a recipient;
determining at least one classification type that applies to the at least one electronic message, the at least one classification type determined based on at least one or more express indications associated with the message prior to a sending of the at least one electronic message to the recipient, wherein determining the at least one classification type comprises scanning the at least one electronic message based on a plurality of classification types;
providing the at least one electronic message and at least one identification of the at least one classification type that applies to the at least one electronic message to a machine learning trainer adapted to determine a machine learning policy that associates attributes of electronic messages with the at least one classification type;
receiving a second electronic message, the second electronic message comprising one or more of the attributes that the machine learning policy associates with the at least one classification type;
determining, at a classification scanner, that the at least one classification type applies to the second electronic message based on the machine learning policy; and
based on the determination, instructing, by the classification scanner, an enforcer to apply the at least one classification, wherein the application of the at least one classification comprises taking an action associated with the second electronic message based on the determination that the at least one classification type applies to the second electronic message, the action associated with the classification type.
16. The system of claim 15 , wherein the action comprises enforcing a compliance criteria.
17. The system of claim 16 , wherein the compliance criteria is associated with the machine learning policy or the classification type.
18. The system of claim 15 , wherein the machine learning policy is applicable to a domain, premise, company, or department.
19. The system of claim 18 , wherein the domain, premise, company, or department is associated with the sender or the recipient.
20. The system of claim 19 , wherein the action is specific to the domain, premise, company, or department.
21. The system of claim 20 , wherein the second electronic message is an attachment to a third electronic message.