Resilient self-detection of malicious exfiltration of sensitive data

A method for ensuring information security comprising:

• at a data exfiltration detection platform comprising at least one processor, a communication interface, and memory:
• loading, into a plurality of data entities, secure enterprise data received from an enterprise entity, wherein each data entity of the plurality of data entities comprises a data exfiltration detection and mitigation module, and wherein each portion of the loaded secure enterprise data corresponding to one of the plurality of data entities, which can communicate with other data entities of the plurality of data entities;
• after loading the secure enterprise data into the plurality of data entities, activating, in each data entity of the plurality of data entities, a verification process associated with the data exfiltration detection and mitigation module of each data entity,
• wherein activating the verification process associated with the data exfiltration detection and mitigation module of each data entity comprises triggering the data exfiltration detection and mitigation module of each data entity to send verification messages to the data exfiltration detection and mitigation modules of the communicated other data entities of the plurality of data entities,
• wherein the data exfiltration detection and mitigation module of each data entity is configured to receive and validate verification messages received from the other data entities of the plurality of data entities, and
• wherein the data exfiltration detection and mitigation module of each data entity is configured to delete respective secure enterprise data loaded and stored in the corresponding data entity upon failing to receive the verification messages from the communicated other data entities of the plurality of data entities;
• and
• sending a confirmation message to an enterprise data management platform of the enterprise entity indicating that the loaded secure enterprise data is being securely maintained.

One or more non-transitory computer-readable storage media storing instructions that, when executed by a data exfiltration detection platform comprising at least one processor device, a communication interface, and memory, cause the data exfiltration detection platform to:

• load, into a plurality of data entities, secure enterprise data received from an enterprise entity, wherein each data entity of the plurality of data entities comprises a data exfiltration detection and mitigation module, and wherein each portion of the loaded secure enterprise data corresponding to one of the plurality of data entities, which can communicate with other data entities of the plurality of data entities;
• after loading the secure enterprise data into the plurality of data entities, activate, in each data entity of the plurality of data entities, a verification process associated with the data exfiltration detection and mitigation module of each data entity,
• wherein activating the verification process associated with the data exfiltration detection and mitigation module of each data entity comprises triggering the data exfiltration detection and mitigation module of each data entity to send verification messages to the data exfiltration detection and mitigation modules of the communicated other data entities of the plurality of data entities,
• wherein the data exfiltration detection and mitigation module of each data entity is configured to receive and validate verification messages received from the other data entities of the plurality of data entities, and
• wherein the data exfiltration detection and mitigation module of each data entity is configured to delete respective secure enterprise data loaded and stored in the corresponding data entity upon failing to receive the verification messages from the communicated other data entities of the plurality of data entities;
• and
• send a confirmation message to an enterprise data management platform of the enterprise entity indicating that the loaded secure enterprise data is being securely maintained.