User Model-Based Data Loss Prevention

A non-transitory computer-readable storage medium storing computer program instructions executable by a processor to perform operations for providing network security, the operations comprising:

• receiving, via a computer network, an electronic message sent by a sending user of an enterprise to a receiving user;
• analyzing the electronic message using a machine-learned user model describing the sending user's electronic messages, the user model generated based at least in part on previous electronic messages sent by the sending user;
• determining, based on the analysis, that the electronic message violates a security policy of the enterprise;
• and
• performing a security action based on the determination that the electronic message violates the security policy.

A system, comprising:

• a processor for executing computer program instructions;
• and
• a non-transitory computer-readable storage medium storing computer program instructions executable by the processor to perform operations for providing network security, the operations comprising:
• receiving, via a computer network, an electronic message sent by a sending user of an enterprise to a receiving user;
• analyzing the electronic message using a machine-learned user model describing the sending user's electronic messages, the user model generated based at least in part on previous electronic messages sent by the sending user;
• determining, based on the analysis, that the electronic message violates a security policy of the enterprise;
• and
• performing a security action based on the determination that the electronic message violates the security policy.