Data protection in a networked computing environment

A system for monitoring data traffic in a networked computing environment, comprising:

• an activity monitor configured to:
• gather characteristics of data traffic associated with a cloud resource, wherein the gathering is consistent with a privacy agreement of the cloud provider;
• analyze data traffic to determine whether the data traffic is indicative of unusual activity based on one or more characteristics, wherein the one or more characteristics are determined from information about the resource received from a cloud provider database and the unusual activity is associated with a malicious activity;
• increment a counter by a predefined value, wherein the counter is associated with the cloud resource and the predefined value is associated with the malicious activity;
• and
• perform a remediation action when the counter exceeds a predefined threshold.

A computer program product for monitoring data traffic in a networked computing environment, the computer program product comprising a computer readable storage media, and program instructions stored on the computer readable storage media, to:

• gather characteristics of data traffic associated with a cloud resource, wherein the gathering is consistent with a privacy agreement of the cloud provider;
• analyze data traffic to determine whether the data traffic is indicative of unusual activity based on one or more characteristics, wherein the one or more characteristics are determined from information about the resource received from a cloud provider database and the unusual activity is associated with a malicious activity;
• increment a counter by a predefined value, wherein the counter is associated with the cloud resource and the predefined value is associated with the malicious activity;
• and
• perform a remediation action when the counter exceeds a predefined threshold.