US 11,874,853 B2
Data classification by on-the-fly inspection of data transactions
Eldad Chai, Kfar Saba (IL); Yoav Cohen, Nes-Ziona (IL); and Ben Herzberg, Modiin (IL)
Assigned to SATORI CYBER LTD., Rishon Lezion (IL)
Filed by Satori Cyber Ltd., Rishon Lezion (IL)
Filed on Sep. 9, 2020, as Appl. No. 17/015,111.
Prior Publication US 2022/0075801 A1, Mar. 10, 2022
Int. Cl. G06F 16/00 (2019.01); G06F 16/28 (2019.01); G06F 16/23 (2019.01)
CPC G06F 16/285 (2019.01) [G06F 16/2379 (2019.01)] 17 Claims
OG exemplary drawing
 
1. A data classification system for classifying data of a data store based on inspecting data transactions between clients and the data store, comprising:
a proxy, configured to intercept transactions that are conducted over a network between clients and the data store, wherein the transactions include queries and responses, and wherein the queries or responses carry data; and
a processor, configured to construct, based on the intercepted transactions, a classification map comprising a classification of at least some of the data that is stored in the data store into predefined classes, wherein the classification map lists memory locations of data in the data store along with a corresponding classification of the sensitivity of the data,
wherein the processor comprises:
a knowledge store including the classification map; and
a classifier which classifies the data as to whether it is sensitive and updates the classification map based on the results of the classification, wherein the classifier is configured to check for intercepted transactions whether their data already appears in the classification map, and to refrain from classifying data of transactions for which the data is already in the classification map.