Providing identity protection
Techniques for providing identity protection are disclosed. A system, process, and/or computer program product for providing identity protection includes monitoring a plurality of sites, extracting predetermined user information for a user from the plurality of monitored sites to generate a profile of the user, analyzing, using a model, the profile of the user to detect whether one or more security vulnerabilities exist for social engineering attacks for one or more enterprise resources associated with the user, and performing an action in response to the one or more detected security vulnerabilities based on a policy.
1. A system, comprising:
a processor configured to:
monitor a plurality of sites;
extract predetermined user information for a user from the plurality of monitored sites to generate a profile of the user;
analyze, using a model, the profile of the user to detect whether one or more security vulnerabilities exist for social engineering attacks for one or more enterprise resources associated with the user, comprising to:
identify relationships between the profile and enterprise resources;
determine, using the model, similarities to known security vulnerabilities based on the relationships, wherein the model utilizes a machine learning technique, wherein the model is trained using a set of known security vulnerabilities; and
determine whether a security vulnerability to an enterprise resource exists based on the similarities; and
perform an action in response to the one or more detected security vulnerabilities based on a policy; and
a memory coupled to the processor and configured to the processor with instructions.
2. The system of claim 1 , wherein the plurality of sites includes a social media site and/or a people search database.
3. The system of claim 1 , wherein the action includes one or more of the following: generate an alert, generate a report, and/or generate an email.
4. The system of claim 1 , wherein the action includes removing one or more pieces of the predetermined user information from the Internet.
5. The system of claim 1 , wherein the action includes making private a social media site, so that information associated with the user is not publicly available.
6. The system of claim 1 , wherein the action includes adding multifactor authentication to the one or more enterprise resources associated with the user in the event that the one or more enterprise resources do not already have multifactor authentication.
7. The system of claim 1 , the processor further configured to:
identify a new social media resource attack and/or a new social engineering type attack; and
update the model based on the new social media resource attack and/or the new social engineering type attack.
8. A method, comprising:
monitoring a plurality of sites;
extracting, using a processor, predetermined user information for a user from the plurality of monitored sites to generate a profile of the user;
analyzing, using a model, the profile of the user to detect whether one or more security vulnerabilities exist for social engineering attacks for one or more enterprise resources associated with the user, comprising:
identifying relationships between the profile and enterprise resources;
determining, using the model, similarities to known security vulnerabilities based on the relationships, wherein the model utilizes a machine learning technique, wherein the model is trained using a set of known security vulnerabilities; and
determining whether a security vulnerability to an enterprise resource exists based on the similarities; and
performing, using the processor, an action in response to the one or more detected security vulnerabilities based on a policy.
9. The method of claim 8 , wherein the plurality of sites includes a social media site and/or a people search database.
10. The method of claim 8 , wherein the action includes one or more of the following: generate an alert, generate a report, and/or generate an email.
11. The method of claim 8 , wherein the action includes removing one or more pieces of the predetermined user information from the Internet.
12. The method of claim 8 , wherein the action includes making private a social media site, so that information associated with the user is not publicly available.
13. The method of claim 8 , wherein the action includes adding multifactor authentication to the one or more enterprise resources associated with the user in the event that the one or more enterprise resources do not already have multifactor authentication.
14. The method of claim 8 , further comprising:
identifying a new social media resource attack and/or a new social engineering type attack; and
updating the model based on the new social media resource attack and/or the new social engineering type attack.
15. A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:
monitoring a plurality of sites;
extracting predetermined user information for a user from the plurality of monitored sites to generate a profile of the user;
analyzing, using a model, the profile of the user to detect whether one or more security vulnerabilities exist for social engineering attacks for one or more enterprise resources associated with the user, comprising:
identifying relationships between the profile and enterprise resources;
determining, using the model, similarities to known security vulnerabilities based on the relationships, wherein the model utilizes a machine learning technique, wherein the model is trained using a set of known security vulnerabilities; and
determining whether a security vulnerability to an enterprise resource exists based on the similarities; and
performing an action in response to the one or more detected security vulnerabilities based on a policy.