Content based security requirements
Taking security actions according to calculated sensitivity levels of objects. Sensitivity levels are determined according to learned security measures taken on objects having certain content. Security actions are taken upon determining that an object in view of recently added content has an actionable sensitivity level. Additional considerations apply to baseline aspects of the object as well as ongoing changes to the baseline considerations.
1. A computer-implemented method comprising:
determining characteristics of a set of objects having a first sensitivity score, the characteristics including at least one of memory size, total number of words in an object, access frequency, and storage time;
associating, from the determined characteristics, a set of characteristics of the set of objects with the first sensitivity score;
creating a rules database establishing links between object characteristics and security requirements, the rules database:
linking the set of characteristics with the first sensitivity score; and
linking the first sensitivity score with a set of security requirements;
monitoring use of a computing system for an object modification, the object modification includes adding content to the object;
responsive to detecting the object modification, identifying an object being modified by the object modification and a storage location of the object, the object having a pre-defined sensitivity score, the storage location having a pre-defined security score, and the storage location being secured according to a first security protocol based on the pre-defined security score of the storage location being below a threshold value for maintaining the first security protocol;
computing a revised sensitivity score for the object during modification of characteristics of the object;
revising the pre-defined security score of the identified storage location based on the revised sensitivity score of the object stored therein to generate a revised security score of the storage location; and
responsive to the revised security score of the storage location exceeding the threshold value, taking a security action to modify the first security protocol.
2. The method of claim 1 , further comprising:
collecting user-specific preferences including the set of objects having pre-assigned sensitivity scores and user profile data; and
establishing a training dataset with the collected user-specific preferences;
wherein:
computing the revised sensitivity score is performed by a machine learning model trained on the training dataset.
3. The method of claim 1 , wherein:
the set of objects is a set of text documents;
the storage location is a file system directory; and
the object modification includes adding words and phrases a text document.
4. The method of claim 3 , wherein computing the revised sensitivity score includes:
determining a specified number of characters are added to the text document;
identifying text characteristics of the set of characteristics in the text document including the added words and phrases; and
determining an assigned sensitivity score corresponding to the identified text characteristics.
5. The method of claim 1 , wherein the set of characteristics includes sets of words and sets of phrases.
6. The method of claim 1 , further comprising:
receiving the first threshold value for maintaining the first security protocol from an administrator of the storage location.
7. The method of claim 1 , wherein computing the revised sensitivity score is performed a specified duration of time after detecting the object modification.
8. The method of claim 1 , wherein:
the set of objects is a set of text documents;
the target storage location is a file system directory; and
the modification of characteristics includes adding words and phrases a text document.
9. A computer system comprising:
a processor set; and
a computer readable storage medium;
wherein:
the processor set is structured, located, connected, and/or programmed to run program instructions stored on the computer readable storage medium; and
the program instructions which, when executed by the processor set, cause the processor set to perform a method including:
determining characteristics of a set of objects having a first sensitivity score, the characteristics including at least one of memory size, total number of words in an object, access frequency, and storage time;
associating, from the determined characteristics, a set of characteristics of the set of objects with the first sensitivity score;
creating a rules database establishing links between object characteristics and security requirements, the rules database:
linking the set of characteristics with the first sensitivity score; and
linking the first sensitivity score with a set of security requirements;
monitoring use of a computing system for an object modification, the object modification includes adding content to the object;
responsive to detecting the object modification, identifying an object being modified by the object modification and a storage location of the object, the object having a pre-defined sensitivity score, the storage location having a pre-defined security score, and the storage location being secured according to a first security protocol based on the pre-defined security score of the storage location being below a threshold value for maintaining the first security protocol;
computing a revised sensitivity score for the object during modification of characteristics of the object;
revising the pre-defined security score of the identified storage location based on the revised sensitivity score of the object stored therein to generate a revised security score of the storage location; and
responsive to the revised security score of the storage location exceeding the threshold value, taking a security action to modify the first security protocol.
10. The computer system of claim 9 , further causing the processor to perform a method including:
collecting user-specific preferences including the set of objects having pre-assigned sensitivity scores and user profile data; and
establishing a training dataset with the collected user-specific preferences;
wherein:
computing the revised sensitivity score is performed by a machine learning model trained on the training dataset.
11. The computer system of claim 9 , wherein:
the set of objects is a set of text documents;
the storage location is a file system directory; and
the object modification includes adding words and phrases a text document.
12. The computer system of claim 11 , wherein computing the revised sensitivity score includes:
determining a specified number of characters are added to the text document;
identifying text characteristics of the set of characteristics in the text document including the added words and phrases; and
determining an assigned sensitivity score corresponding to the identified text characteristics.
13. The computer system of claim 9 , wherein the set of characteristics includes sets of words and sets of phrases.
14. The computer system of claim 9 , further comprising:
receiving the first threshold value for maintaining the first security protocol from an administrator of the storage location.
15. A computer-implemented method comprising:
determining characteristics of a set of objects having a first sensitivity score, the characteristics including a memory size and an access frequency;
associating, from the determined characteristics, a set of characteristics of the set of objects with the first sensitivity score;
creating a rules database establishing links between object characteristics and security requirements, the rules database linking the set of characteristics with a set of security requirements;
computing a revised sensitivity score for an object during modification of characteristics of the object;
generating a current security score of a target storage location based on the revised sensitivity score of the object, wherein the object is stored in the target storage location according to a first security protocol; and
responsive to the current security score of the target storage location exceeding a threshold value for the first security protocol, taking a security action to modify the first security protocol.