Systems for discovering sensitive information on computer networks

• US 8,738,605 B2
• Filed: 03/30/2012
• Issued: 05/27/2014
• Est. Priority Date: 03/30/2012
• Status: Active Grant

• Current Assignee: Go Daddy Operating Company LLC (GoDaddy, Inc.)
• Original Assignee: Go Daddy Operating Company LLC (GoDaddy, Inc.)
• Inventors: Devarajan, Ganesh, Redfoot, Todd
• Primary Examiner(s): MOSER, BRUCE M
• Application Number:
  US13/436,751
• Publication Number:
  US 20130262428A1
• Time in Patent Office: 788 Days
• US Class Current: 707/709
• CPC Class Codes: G06F 16/27 Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
• CPC Class Codes: G06F 16/90344 by using string matching techniques
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques

Abstract

One embodiment of a system of the present invention for discovering sensitive information on computer network includes means for discovering databases on a computer network, means for defining a pattern for a data discovery, means for discovering qualifying records by matching the pattern with field names and/or record values in the databases, means for sending electronic notification to a database administrator managing the qualifying database, means for receiving a selection choice from the database administrator managing the qualifying database identifying the status for the qualifying records.

Claims

1. A system, comprising:

a) means for discovering one or more databases on a computer network by running a network crawler configured to identify said one or more databases on said computer network,

b) means for adding said one or more databases discovered by said network crawler on said computer network to one or more electronic storage devices,

c) means for defining a pattern for a database data discovery,

d) means for discovering one or more qualifying records in said one or more databases by matching said pattern with field names or record values in said one or more databases,

e) means for adding said one or more qualifying records discovered by matching said pattern to said one or more electronic storage devices,

f) means for sending an electronic notification to a database administrator managing a qualifying database, wherein said qualifying database is a database containing said one or more qualifying records discovered by matching said pattern with field names or record values in said one or more databases, wherein said electronic notification contains a link to a web-based graphical user interface comprising a summary of said one or more qualifying records found on said qualifying database and a selector for assigning a status to said one or more qualifying records,

g) means for receiving a selection choice to said selector from said database administrator managing said qualifying database, wherein said selection choice identifies said status for said one or more qualifying records, and

h) means for updating said one or more electronic storage devices with said selection choice provided by said database administrator identifying said status for said one or more qualifying records.

2. The system of claim 1, further comprising:

i) means for determining whether said selection choice provided by said database administrator identifying said status for said one or more qualifying records passes automated validation.

3. The system of claim 1, further comprising:

i) means for determining whether said record values in said one or more qualifying records are encrypted.

4. The system of claim 1, further comprising:

i) means for determining a level of encryption of said record values in said one or more qualifying records.

5. The system of claim 1, wherein said selection choice provided by said database administrator indicates that said one or more qualifying records was a false positive.

6. The system of claim 1, wherein said selection choice provided by said database administrator indicates that said one or more qualifying records are in a third-party database.

7. The system of claim 1, wherein said selection choice provided by said database administrator indicates that said one or more qualifying records are contained in one or more replication columns.

8. The system of claim 1, wherein said selection choice provided by said database administrator indicates that said one or more qualifying records are compliant with company policies.

9. The system of claim 1, wherein said selection choice provided by said database administrator indicates that said one or more qualifying records are required.

10. The system of claim 1, wherein said selection choice provided by said database administrator indicates that said one or more qualifying records were deleted.

11. The system of claim 1, wherein said selection choice provided by said database administrator indicates that said one or more qualifying records are needed for development purposes.