Cross-channel network security system with tiered adaptive mitigation operations

A computer program product for cross-channel network security with tiered adaptive mitigation operations, whereby the computer program product is structured for dynamic detection of security events associated with network devices and resources, and triggering real-time mitigation operations across a plurality of resource channels, the computer program product comprising a non-transitory computer-readable storage medium having computer-executable instructions to:

• receive, from a first network device, a request to execute a first activity via a first activity channel, wherein the first activity is associated with a first resource;
• extract activity data regarding the first network device and the first resource;
• escalate, in real-time, a level of authentication required for executing the first activity via the first activity channel based on determining that (i) the first activity is associated with a security event, and (ii) the first network device is associated with a predetermined security device, wherein escalating the level of authentication further comprises:
• determining that a user associated with the first network device is currently in a first physical area associated with a historical exposure event, comprising:
• determining a successful authentication of biometric credentials associated with the user within a predetermined time interval preceding the request to execute the first activity;
• determining a first geographic location associated with the input of the biometric credentials;
• constructing a distance range from the first geographic location based on determining travel time between the first geographic location and the first physical area associated with the first activity channel, based on, at least, local travel restrictions preventing the user's arrival at the first physical area;
• and
• determining that the first physical area is outside the distance range;
• disabling one or more features of the first network device, comprising freezing a display screen associated with the first network device when the first network device is in the first physical area and prohibiting transfer of data to and from first network device when the first network device is in the first physical area;
• blocking completion of the first activity via the first activity channel for a first time interval at least until a security proceed signal is determined;
• presenting a determined escalated authentication requirement on a second network device;
• and
• presenting, via the second network device, a request for an additional authentication response;
• construct one or more tiered adaptive mitigation actions based on at least the activity data, wherein the one or more tiered adaptive mitigation actions comprise de-escalating (i) an action tier, (ii) a resource tier, and/or (iii) a device tier associated with the first activity;
• trigger, in real-time, initiation of the one or more tiered adaptive mitigation actions, prior to the first activity via the first activity channel to prevent security exposure associated with the first activity, comprising:
• implementing a first block of the first resource such that the first activity associated with the first resource is blocked, wherein the first block is an adapted partial block;
• receiving a request to execute a second activity associated with the first resource;
• and
• allowing the second activity associated with the blocked first resource in response to determining that the second activity has a level of authentication below a predetermined threshold;
• in response to determining an authorization validation status of the activity data, continue the one or more tiered adaptive mitigation actions and trigger the security proceed signal;
• remove the block to the completion of the first activity via the first activity channel;
• and
• unlock the one or more disabled features of the first network device.

A method for cross-channel network security with tiered adaptive mitigation operations, whereby the method is structured for dynamic detection of security events associated with network devices and resources, and triggering real-time mitigation operations across a plurality of resource channels, the method comprising:

• receiving, from a first network device, a request to execute a first activity via a first activity channel, wherein the first activity is associated with a first resource;
• extracting activity data regarding the first network device and the first resource;
• escalating, in real-time, a level of authentication required for executing the first activity via the first activity channel based on determining that (i) the first activity is associated with a security event, and (ii) the first network device is associated with a predetermined security device, wherein escalating the level of authentication further comprises:
• determining that a user associated with the first network device is currently in a first physical area associated with a historical exposure event, comprising:
• determining a successful authentication of biometric credentials associated with the user within a predetermined time interval preceding the request to execute the first activity;
• determining a first geographic location associated with the input of the biometric credentials;
• constructing a distance range from the first geographic location based on determining travel time between the first geographic location and the first physical area associated with the first activity channel, based on, at least, local travel restrictions preventing the user's arrival at the first physical area;
• and
• determining that the first physical area is outside the distance range;
• disabling one or more features of the first network device, comprising freezing a display screen associated with the first network device when the first network device is in the first physical area and prohibiting transfer of data to and from first network device when the first network device is in the first physical area;
• blocking completion of the first activity via the first activity channel for a first time interval at least until a security proceed signal is determined;
• presenting a determined escalated authentication requirement on a second network device;
• and
• presenting, via the second network device, a request for an additional authentication response;
• constructing one or more tiered adaptive mitigation actions based on at least the activity data, wherein the one or more tiered adaptive mitigation actions comprise de-escalating (i) an action tier, (ii) a resource tier, and/or (iii) a device tier associated with the first activity;
• triggering, in real-time, initiation of the one or more tiered adaptive mitigation actions, prior to the first activity via the first activity channel to prevent security exposure associated with the first activity, comprising:
• implementing a first block of the first resource such that the first activity associated with the first resource is blocked, wherein the first block is an adapted partial block;
• receiving a request to execute a second activity associated with the first resource;
• and
• allowing the second activity associated with the blocked first resource in response to determining that the second activity has a level of authentication below a predetermined threshold;
• in response to determining an authorization validation status of the activity data, continuing the one or more tiered adaptive mitigation actions and triggering the security proceed signal;
• remove the block to the completion of the first activity via the first activity channel;
• and
• unlock the one or more disabled features of the first network device.