Determination of user reputation regarding data object exposure in cloud computing environments

A non-transitory computer-readable storage medium having program code stored thereon, the program code comprising instructions to:

• impersonate a user of a cloud computing environment to obtain behavior information of the user;
• analyze the behavior information obtained for the user of the cloud computing environment, wherein the behavior information indicates behavior of the user corresponding to a plurality of data objects in the cloud computing environment that are associated with the user;
• determine, from the behavior information, a plurality of exposure characteristics relative to the plurality of data objects, wherein the plurality of characteristics comprises one or more user location access behavior characteristics, one or more temporal access behavior characteristics, one or more collaboration or sharing characteristics, and one or more login behavior characteristics;
• identify a plurality of rules corresponding to the plurality of exposure characteristics;
• calculate one or more reputations of the user for data object exposure based on applying the plurality of rules to the plurality of exposure characteristics;
• and
• indicate the one or more reputations of the user to an entity with which the user is associated.

A system comprising:

• a processor;
• and
• a computer-readable medium having instructions stored thereon that are executable by the processor to cause the system to,
• impersonate a user of a cloud computing environment to obtain behavior information of the user;
• analyze the behavior information obtained for the user of the cloud computing environment, wherein the behavior information indicates behavior of the user for a cloud computing environment;
• determine, based on the behavior information, a plurality of exposure characteristics relative to a plurality of data objects accessed by the user in the cloud computing environment,
• wherein the plurality of exposure characteristics comprises one or more user location access behavior characteristics, one or more temporal access behavior characteristics, one or more collaboration or sharing characteristics, and one or more login behavior characteristics;
• identify a plurality of rules corresponding to the plurality of exposure characteristics;
• apply the plurality of rules to the plurality of exposure characteristics to determine one or more reputation values for the user;
• and
• indicate the one or more reputation values of the user to an entity with which the user is associated.