Distributed Security Analysis for Shared Content
AssigneeCitrix Systems, Inc.
InventorsRamanjaneya Reddy Kamalapuram, Praveen Raja Dhanabalan
Life of this patent
Estimating the term…
Abstract
Methods and systems for providing a cost effective and robust security solution for shared files stored by file sharing software solutions are described herein. The methods and systems for generating a ledger associated with shared files, which may include scanning data received from applications associated with a number of client devices and from a cloud based scanner. An access manager may control file permissions granted to users based on requests for scan data from each user device requesting access to a shared file. A plurality of different scanning applications may provide data that is collected for each shared file to provide a diverse analysis of a shared file to increase user confidence in a file security status.
Claims19
A method comprising:
- storing, in a network storage system, a shared file received from a first user device;
- receiving, by the network storage system and from the first user device, scan data associated with the shared file, wherein the scan data indicates results of a security scan of the shared file;
- generating, by the network storage system, a ledger associated with the shared file, wherein the ledger comprises the scan data associated with the shared file on the network storage system;
- receiving, at the network storage system, scan data from one or more additional user devices;
- determining, by the network storage system, that the shared file is a corrupt file, wherein determining that the shared file is a corrupt file comprises determining that there are pre-identified issues associated with the shared file;
- updating, by the network storage system and in response to the receipt of scan data from the one or more additional user devices, the ledger of the shared file in the network storage system;
- weighting, by the network storage system, the scan data based on a type of scanner;
- determining, based on the weighted scan data, a confidence value of the shared file;
- determining that the confidence value is less than a confidence threshold;
- and
- providing, by the network storage system, based on the determining that the shared file is a corrupt file, and based on the determination that the confidence value is less than the confidence threshold, denying the one or more additional devices permission to access the shared.
An apparatus, comprising:
- at least one processor;
- and
- memory storing executable instructions configured to, when executed by the at least one processor, cause the apparatus to:
- store a shared file in a network storage system;
- request, from a first user device, scan data associated with the shared file, wherein the scan data indicates results of a security scan of the shared file;
- generate a ledger associated with the shared file, wherein the ledger comprises the scan data associated with the shared file;
- receive a request from a second user device to access the shared file stored on the network storage system;
- in response to receiving the request to access the shared file, request scan data from the second user device;
- update, based on a response to the request for scan data from the second user device, the ledger of the shared file in the network storage system;
- weight the scan data based on a type of scanner;
- determine, based on the weighted scan data, a confidence value of the shared file;
- determine that the confidence value is less than a confidence threshold;
- and
- prevent, based on a determination that the confidence value is less than the confidence threshold, write permission for the shared file to the second user device.
One or more non-transitory computer-readable media storing instructions configured to, when executed, cause a computing device to:
- store a shared file in a network storage system;
- request, from a first user device, scan data associated with the shared file, wherein the scan data indicates results of a security scan of the shared file;
- generate a ledger associated with the shared file, wherein the ledger comprises the scan data associated with the shared file;
- receive a request from a second user device to access the shared file stored on the network storage system;
- in response to receiving the request to access the shared file, request scan data from the second user device;
- update, based on a response to the request for scan data from the second user device, the ledger of the shared file in the network storage system;
- weight the scan data based on a type of scanner;
- determine, based on the weighted scan data, a confidence value of the shared file;
- determine that the confidence value is less than a confidence threshold;
- and
- deny, based on the determination that the confidence value exceeds the confidence threshold, write permission for the shared file to the second user device.
Dependencies are inferred from the claim text.