Methods and systems for prevention of vendor data abuse

A computer system for automatically identifying and solving for vendor data abuse in an enterprise network, comprising:

• a processor;
• a memory containing instructions when executed on the processor, causes the processor to perform operations that:
• implement a vendor detection at one or more gateways of the enterprise network;
• map a set of data along with any associated data attributes of the set of data that are being shared with a vendor via the one or more gateways;
• detect and identify an access anomaly with respect to the set of data associated with a vendor access;
• and
• implement a specified data minimization process to the access anomaly wherein the data minimization process is applied for every vendor sharing agreement engaged in by the enterprise network that is associated with the vendor,
• wherein data minimization is implemented by prohibiting a vendor access to any sensitive data in the enterprise network, and
• wherein the step of implementing the vendor detection at the one or more gateways of the enterprise network further comprises:
• implementing a match based on a vendor provided Internet Protocol (IP) identifier;
• if no match is found, then identifying the vendor based on an API endpoint data, an API path data, a location data, and a region information data;
• and
• fingerprinting a request and a header information from every vendor.

A computerized method for determining abnormal vendor access:

• fingerprinting a vendor behavior of a vendor and setting a normal fingerprint of the vendor behavior;
• analyzing an abnormal vendor access based on access frequency of the vendor;
• detecting that a vendor access has a different access frequency or a random-access frequency over a specified period of time;
• setting a vendor abuse risk associated with the different access frequency or the random-access frequency over a specified period of time as high;
• when the vendor abuse risk is set as high, determining that an abnormal access method is extant;
• and
• disabling any vendor access permissions of the vendor associated with an abnormal vendor access frequency,
• determines a new personal information (PII) type or PII data being transferred via a gateway in an enterprise network;
• detecting that the vendor is consuming the new PII types or PII data;
• and
• disabling any vendor access permissions of the vendor when it is detected that the vendor is consuming the new PII types or PII data;
• detecting a critical PII type data is being transferred to the vendor;
• and
• disabling any vendor access permissions of the vendor when it is detected that the vendor is receiving the critical PII type data;
• and
• implementing vendor detection at the gateway of the enterprise network comprising:
• implementing a match based on a vendor provided Internet Protocol (IP) identifier;
• if no match is found, then identifying the vendor based on an API endpoint data, an API path data, a location data, and a region information data;
• and
• fingerprinting a request and a header information from every vendor.