Systems and methods for dynamic access control over shared resources

A system for dynamic access control over shared resources, the system comprising:

• an access-detection module, stored in memory, that detects an attempt by a user to access a resource via a computing environment;
• a risk-assessment module, stored in memory, that:
• identifies a risk value that:
• represents a risk level of the user attempting to access the resource via the computing environment;
• and
• is based at least in part on a role type of the user;
• identifies a sensitivity value that represents a sensitivity level of the resource that the user is attempting to access via the computing environment;
• identifies a risk value that represents a risk level of the computing environment through which the user is attempting to access the resource;
• and
• performs a case-by-case evaluation of the attempt to access the resource by calculating an overall risk score for the attempt by the user to access the resource by summing up:
• the risk value that represents the risk level of the user;
• the sensitivity value that represents the sensitivity level of the resource;
• and
• the risk value that represents the risk level of the computing environment;
• dynamically computes a threshold based at least in part on a statistical distribution of a first class of all risk levels of users, a second class of all sensitivity levels of resources, and a third class of all risk levels of computing environments, wherein:
• the first class represents a first sum calculated by adding an average of all role specific risk values to a weighted standard deviation of all the role specific risk values;
• the second class represents a second sum calculated by adding an average of all resource specific sensitivity values to a weighted standard deviation of all the resource specific sensitivity values;
• and
• the third class represents a third sum calculated by adding an average of all environment specific risk values to a weighted standard deviation of all the environment specific risk values;
• an access-control module, stored in memory, that:
• determines whether the overall risk score for the attempt to access the resource satisfies the dynamically computed threshold;
• and
• determines, based at least in part on whether the overall risk score for the attempt to access the resource satisfies the dynamically computed threshold, whether to grant the user access to the resource via the computing environment;
• and
• at least one physical processor configured to execute the access-detection module, the risk-assessment module, and the access-control module.

A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

• detect an attempt by a user to access a resource via a computing environment;
• identify a risk value that:
• represents a risk level of the user attempting to access the resource via the computing environment;
• and
• is based at least in part on a role type of the user;
• identify a sensitivity value that represents a sensitivity level of the resource that the user is attempting to access via the computing environment;
• identify a risk value that represents a risk level of the computing environment through which the user is attempting to access the resource;
• perform a case-by-case evaluation of the attempt to access the resource by calculating an overall risk score for the attempt to access the resource by summing up:
• the risk value that represents the risk level of the user;
• the sensitivity value that represents the sensitivity level of the resource;
• and
• the risk value that represents the risk level of the computing environment;
• dynamically compute a threshold based at least in part on a statistical distribution of a first class of all risk levels of users, a second class of all sensitivity levels of resources, and a third class of all risk levels of computing environments, wherein:
• the first class represents a first sum calculated by adding an average of all role specific risk values to a weighted standard deviation of all the role specific risk values;
• the second class represents a second sum calculated by adding an average of all resource specific sensitivity values to a weighted standard deviation of all the resource specific sensitivity values;
• and
• the third class represents a third sum calculated by adding an average of all environment specific risk values to a weighted standard deviation of all the environment specific risk values;
• determine whether the overall risk score for the attempt to access the resource satisfies the dynamically computed threshold;
• and
• determine, based at least in part on whether the overall risk score for the attempt to access the resource satisfies the dynamically computed threshold, whether to grant the user access to the resource via the computing environment.