SECURITY MONITORING

• US 20140259164A1
• Filed: 05/22/2014
• Published: 09/11/2014
• Est. Priority Date: 05/13/2010
• Status: Abandoned Application

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Fly, Robert, Greene, Collin, Soby, Brian, Dolph, James
• Application Number:
  US14/285,539
• Publication Number:
  US 20140259164A1
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

Disclosed are systems, apparatus, methods, and computer readable media for determining a confidentiality for a site record. In one embodiment, a site record for analysis is identified at a computing device. The computing device may identify a source for the site record and determine, based on the source, a source-based confidentiality for the site record. The computing device may identify, based on the site record, a designated confidentiality for the site record, and determine that the designated confidentiality is different from the source-based confidentiality. Responsive to the determination that the designated confidentiality is different from the source-based confidentiality, the computing device may store the source-based confidentiality for the site record on a storage medium.

Claims

1. A method of determining a confidentiality for a site record, the method comprising:

identifying, at a computing device, a site record for analysis;

identifying a source for the site record;

determining, based on the source, a source-based confidentiality for the site record;

identifying, based on the site record, a designated confidentiality for the site record;

determining that the designated confidentiality is different from the source-based confidentiality; and

responsive to the determination that the designated confidentiality is different from the source-based confidentiality, storing the source-based confidentiality for the site record on a storage medium.

2. The method of claim 1, wherein determining the source-based confidentiality comprises:

accessing a list of designated confidentiality levels, each associated with a respective one of a plurality of site record sources.

3. The method of claim 1, wherein determining the source-based confidentiality comprises:

determining a source type of the source; and

identifying a confidentiality level based on the source type.

4. The method of claim 3, wherein the source type indicates whether the source is internal or external to an on-demand services environment.

5. The method of claim 3, wherein the source type indicates whether the source is accessible to an entity accessing an on-demand services environment.

6. The method of claim 1, wherein the source-based confidentiality is determined based at least in part on public accessibility of the source of the site record.

7. The method of claim 1, wherein the source-based confidentiality is determined based at least in part on a trust level of the source, the trust level indicating a degree to which the source is trusted in an on-demand services environment.

8. The method of claim 1, wherein the designated confidentiality is determined based on identifying confidential information included in the site record.

9. The method of claim 1, wherein the designated confidentiality has a default or initial level.

10. The method of claim 1, further comprising:

storing contextual information for the site record, the contextual information including one or both of;

the source, and a time at which determination of the source-based confidentiality was last conducted.

11. The method of claim 1, wherein the site record is associated with a network address.

12. The method of claim 1, wherein the site record is associated with a site accessible via an on-demand services environment, the site being one of:

a computer system, a program, a configuration, a web site, or a computing services construct.

13. The method of claim 1, wherein the source of the site record is one of:

a server log, an audit trail, information internal to an on-demand services environment, an Internet search engine, an Internet spider cache, a public network, an information cache or repository, or a communication received by an entity of an on-demand services environment.

14. One or more servers for determining a confidentiality for a site record, the one or more servers comprising:

one or more processors operable to cause one or more instructions to be executed to;

identify, at a computing device, a site record for analysis;

identify a source for the site record;

determine, based on the source, a source-based confidentiality for the site record;

identify, based on the site record, a designated confidentiality for the site record;

determine that the designated confidentiality is different from the source-based confidentiality; and

responsive to the determination that the designated confidentiality is different from the source-based confidentiality, store the source-based confidentiality for the site record on a storage medium.

15. The one or more servers of claim 14, wherein determining the source-based confidentiality comprises:

accessing a list of designated confidentiality levels, each associated with a respective one of a plurality of site record sources.

16. The one or more servers of claim 14, the one or more processors further operable to cause one or more instructions to be executed to:

store contextual information for the site record, the contextual information including one or both of;

the source, and a time at which determination of the source-based confidentiality was last conducted.

17. A non-transitory computer-readable storage medium storing instructions executable by a server configured to cause a method to be performed for determining a confidentiality for a site record, the method comprising:

identifying a site record for analysis;

identifying a source for the site record;

determining, based on the source, a source-based confidentiality for the site record;

identifying, based on the site record, a designated confidentiality for the site record;

determining that the designated confidentiality is different from the source-based confidentiality; and

responsive to the determination that the designated confidentiality is different from the source-based confidentiality, storing the source-based confidentiality for the site record on a storage medium.

18. The non-transitory computer-readable storage medium of claim 17, wherein determining the source-based confidentiality level comprises:

accessing a list of designated confidentiality levels, each associated with a respective one of a plurality of site record sources.

19. The non-transitory computer-readable storage medium of claim 17, the method further comprising:

storing contextual information for the site record, the contextual information including one or both of;

the source, and a time at which determination of the source-based confidentiality was last conducted.

20. A method of determining a confidentiality for a site record, the method comprising:

identifying, at a computing device, a site record for analysis;

identifying a source for the site record;

determining, based on the source, a source-based confidentiality for the site record;

identifying, based on the site record, a designated confidentiality for the site record;

determining that the designated confidentiality is not higher than the source-based confidentiality; and

responsive to a determination that the designated confidentiality is not higher than the source-based confidentiality, continuing to use the designated confidentiality for the site record.