Data leakage protection in cloud applications

Abstract

A computer-implemented method for data leakage protection is disclosed. A monitoring template corresponding to the cloud application is selected based upon communication between a user and a cloud application and from a plurality of monitoring templates. A monitor is generated using the selected monitoring template. Identifying information of content shared between the user and the cloud application is obtained using the generated monitor. Data about the shared content for security analysis is obtained according to the identifying information of the shared content.

1 - 20 . (canceled) 
     
     
         21 . A computer-implemented method within client and separate from a data leakage protection hardware system and a cloud application, comprising:
 transmitting, by the client, a communication to the cloud application; and   receiving, from the data leakage protection hardware system and by the client, a revised response to the communication, wherein   the data leakage protection hardware system selects, from a plurality of monitoring templates and based upon the communication, a monitoring template corresponding to the cloud application,   the monitoring template is used to generate a monitor, and   an original response by the cloud application and to the communication is revised to include the monitor and forms the revised response.   
     
     
         22 . The method of  claim 21 , wherein
 the monitor includes monitor codes.   
     
     
         23 . The method of  claim 22 , wherein
 the monitor code is configured to be loaded by the client before codes contained in the received response.   
     
     
         24 . The method of  claim 22 , wherein
 the monitor codes are configured to perform an action based upon a specified event.   
     
     
         25 . The method of  claim 24 , wherein
 the specified event is an initiation of an operation to communicate the shared content.   
     
     
         26 . The method of  claim 24 , wherein
 the action includes at least one of
 encrypting a sharing file, 
 adding a watermark to the sharing file, and 
 canceling an operation associated with the specified event. 
   
     
     
         27 . The method of  claim 21 , wherein
 the monitor is configured to:
 capture an identifier of shared content, and 
 communicate the identifier of the shared content to an analyzer separate from the data leakage protection hardware system. 
   
     
     
         28 . The method of  claim 21 , wherein
 the analyzer is associated with an enterprise within which the client operates.   
     
     
         29 . A client hardware system positioned separate from a data leakage protection hardware system and a cloud application, comprising:
 a computer hardware processor configured to initiate the following operations:
 transmitting, by the client hardware system, a communication to the cloud application; and 
 receiving, from the data leakage protection hardware system and by the client hardware system, a revised response to the communication, wherein 
   the data leakage protection hardware system selects, from a plurality of monitoring templates and based upon the communication, a monitoring template corresponding to the cloud application,   the monitoring template is used to generate a monitor, and   an original response by the cloud application and to the communication is revised to include the monitor and forms the revised response.   
     
     
         30 . The client hardware system of  claim 29 , wherein
 the monitor includes monitor codes.   
     
     
         31 . The client hardware system of  claim 30 , wherein
 the monitor code is configured to be loaded by the client hardware system before codes contained in the received response.   
     
     
         32 . The client hardware system of  claim 30 , wherein
 the monitor codes are configured to perform an action based upon a specified event.   
     
     
         33 . The client hardware system of  claim 29 , wherein
 the monitor is configured to:
 capture an identifier of shared content, and 
 communicate the identifier of the shared content to an analyzer separate from the data leakage protection hardware system. 
   
     
     
         34 . The client hardware system of  claim 29 , wherein
 the analyzer is associated with an enterprise within which the client hardware system operates.   
     
     
         35 . A computer program product, comprising
 a computer usable hardware storage device having computer usable program code stored therein,   the computer usable program code, which when executed by a client hardware system positioned separate from a data leakage protection hardware system and a cloud application, causes the client hardware system to perform:
 transmitting, by the client hardware system, a communication to the cloud application; and 
 receiving, from the data leakage protection hardware system and by the client hardware system, a revised response to the communication, wherein 
   the data leakage protection hardware system selects, from a plurality of monitoring templates and based upon the communication, a monitoring template corresponding to the cloud application,   the monitoring template is used to generate a monitor, and   an original response by the cloud application and to the communication is revised to include the monitor and forms the revised response.   
     
     
         36 . The computer program product of  claim 35 , wherein
 the monitor includes monitor codes.   
     
     
         37 . The computer program product of  claim 36 , wherein
 the monitor code is configured to be loaded by the client hardware system before codes contained in the received response.   
     
     
         38 . The computer program product of  claim 36 , wherein
 the monitor codes are configured to perform an action based upon a specified event.   
     
     
         39 . The computer program product of  claim 35 , wherein
 the monitor is configured to:
 capture an identifier of shared content, and 
 communicate the identifier of the shared content to an analyzer separate from the data leakage protection hardware system. 
   
     
     
         40 . The computer program product of  claim 35 , wherein
 the analyzer is associated with an enterprise within which the client hardware system operates.