Cloud application-agnostic data loss prevention (dlp)

A system including one or more processors coupled to memory, the memory loaded with computer instructions to apply data loss prevention, DLP, to cloud-based content services, the instructions, when executed on the processors, implement actions comprising:

• determining that an unknown cloud-based service is being accessed via an application programming interface, API for which no service-specific parser and no category-directed parser is available,
• selecting a generic parser based upon the determination that an unknown cloud-based service is being accessed;
• wherein the generic parser includes at least one default match rule derived from a plurality of syntaxes used by providers of cloud-based content services, wherein the default match rule is associated with at least two categories of services addressed by category-directed parsers;
• parsing content being conveyed via the API using the selected generic parser, collecting metadata and assigning the collected metadata to variables;
• and
• transmitting the collected metadata, assigned to the variables and accompanied by data indicating that the metadata was collected by the generic parser, to a DLP processor for applying data loss prevention to the content being conveyed via the API.

A method of applying data loss prevention, DLP, to cloud-based content services, including:

• determining that a known cloud-based service is being accessed via an application programming interface, API;
• determining that no service-specific parser is available for the API being accessed;
• determining a category of service for the API being accessed;
• selecting a category-directed parser based upon the determined category;
• wherein the category-directed parser includes a plurality of category-directed match rules derived from a plurality of syntaxes used by providers of cloud-based content services to implement the category of service;
• parsing content being conveyed via the API using the category-directed parser to collect metadata and assigning the collected metadata to variables, using the category-directed match rules;
• and
• transmitting the collected metadata assigned to the variables to a DLP processor for applying data loss prevention to the content being conveyed via the API.