PERFORMING FINGERPRINT-BASED DATA LOSS PREVENTION (DLP) USING INFORMATION OBTAINED FROM CLOUD-NATIVE SERVICES

Abstract: systems and methods for performing fingerprint-based data loss prevention (dlp) using information obtained from a cloud-native service are provided. in one example, dlp fingerprints are obtained by a security enforcement system (e.g., a network security appliance, a secure access service edge (sase) platform, or a security service edge (sse)). the dlp fingerprints may be generated locally by the security enforcement system or generated remotely from the security service edge based on a set of files stored in a cloud-native service, representing, for example, infrastructure-as-a-service (iaas) (e.g., an object storage service) or software-as-a-service (saas) (e.g., a file hosting service or a productivity platform). based at least in part on the dlp fingerprints, dlp is performed on a file by a dlp service of the security enforcement system, in which the file is at rest on an endpoint protected by the security enforcement system or in transit through the security enforcement point.

Inventor(s): John A. Headley, Ayan Ray

CPC Classification: H04L63/20 ({for managing network security; network security policies in general (filtering policies )})

Search for rejections for patent application number 20250184360