Systems and methods for automated generative data loss prevention testing

Patent metadata

Field	Value
Publication number	US-12443516-B2
Application number	US-202418591190-A
Country	US
Kind code	B2
Filing date	Feb 29, 2024
Priority date	Feb 29, 2024
Publication date	Oct 14, 2025
Grant date	Oct 14, 2025

Abstract

Disclosed embodiments may include a method for automated generative data loss prevention testing. The system may include one or more processors, and memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to cause the system to receive an instruction to perform data exfiltration prevention testing, select one or more data element types and one or more data channels, and select, based on the one or more data element types, one or more test data generation programs from a plurality of test data generation programs. In some embodiments, the memory can be further configured to cause the system to generate and utilize a set of test data to conduct data exfiltration prevention testing. The data exfiltration prevention testing can be conducted by executing one or more transfers and monitoring the one or more data channels.

First claim

What is claimed is:

1. A system comprising:
one or more processors; and
a memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to cause the system to:
receive an instruction to perform data exfiltration prevention testing;
select, based on the instruction to perform data exfiltration prevention testing, one or more data element types and one or more data channels upon which to perform the data exfiltration prevention testing;
select, based on the one or more data element types, one or more test data generation programs from a plurality of test data generation programs;
generate, using the one or more test data generation programs, a set of test data that comprises sample data of the one or more data element types; and
utilize the set of test data to conduct the data exfiltration prevention testing by:
executing one or more transfers of at least a portion of the set of test data via the one or more data channels; and
monitoring, utilizing one or more data exfiltration prevention software programs, the one or more data channels to attempt to detect the sample data of the one or more data element types.

2. The system of claim 1 , wherein the one or more data element types comprise one or more of:
a social security number;
a primary account number;
a national insurance number;
a social insurance number;
a bank account number;
a tax identification number;
an employer identification number;
a driver's license number;
a passport number; or
a unique identification number.

3. The system of claim 1 , wherein the one or more data channels comprise one or more of:
an email channel;
a network channel;
an endpoint channel;
a web channel; and
a cloud channel.

4. The system of claim 1 , wherein the sample data of the one or more data element types comprise test data examples that adhere to specifications associated with the one or more data element types.

5. The system of claim 1 , wherein the sample data of the one or more data element types comprise a plurality of test data examples of a same one of the one or more data element types, the plurality of test data examples having variations in one or more of:
a delimiter;
one or more keywords; and
a volume.

6. The system of claim 1 , wherein generating the set of test data comprises generating a plurality of different file types comprising at least a portion of the sample data, wherein the plurality of different file types comprises one or more of:
a word processing file;
a spreadsheet file;
an image file; and
a pdf file.

7. The system of claim 1 , wherein generating the set of test data is performed dynamically at runtime based on a system time.

8. A system comprising:
one or more processors; and
a memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to cause the system to:
receive an instruction to perform data exfiltration prevention testing;
select, based on the instruction to perform data exfiltration prevention testing, one or more data element types and one or more data channels upon which to perform the data exfiltration prevention testing;
select, based on the one or more data element types, one or more test data generation programs from a plurality of test data generation programs;
generate, using the one or more test data generation programs, a set of test data that comprises sample data of the one or more data element types; and
output the set of test data to a test executor queue for execution of the data exfiltration prevention testing.

9. The system of claim 8 , wherein the one or more data element types comprise one or more of:
a social security number;
a primary account number;
a national insurance number;
a social insurance number;
a bank account number;
a tax identification number;
an employer identification number;
a driver's license number;
a passport number; or
a unique identification number.

10. The system of claim 8 , wherein the one or more data channels comprise one or more of:
an email channel;
a network channel;
an endpoint channel;
a web channel; and
a cloud channel.

11. The system of claim 8 , wherein the sample data of the one or more data element types comprise test data examples that adhere to specifications associated with the one or more data element types.

12. The system of claim 8 , wherein the sample data of the one or more data element types comprise a plurality of test data examples of a same one of the one or more data element types, the plurality of test data examples having variations in one or more of:
a delimiter;
one or more keywords; and
a volume.

13. The system of claim 8 , wherein generating the set of test data comprises generating a plurality of different file types comprising at least a portion of the sample data, wherein the plurality of different file types comprises one or more of:
a word processing file;
a spreadsheet file;
an image file; and
a pdf file.

14. The system of claim 8 , wherein generating the set of test data is performed dynamically at runtime.

15. A system comprising:
one or more processors; and
a memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to cause the system to:
receive, from a user device and in response to a user input via a graphical user interface (GUI) of the user device, an instruction to perform data exfiltration prevention testing on a selected data element type using a selected test channel;
select, based on at least the selected data element type, one or more test data generation programs from a plurality of test data generation programs;
generate, using the one or more test data generation programs, a set of test data that comprises sample data of the selected data element type;
generate one or more test files, wherein each of the one or more test files comprises at least a portion of the set of test data; and
transmit the one or more test files via the selected test channel.

16. The system of claim 15 , wherein the one or more test files comprise one or more of:
a word processing file;
a spreadsheet file;
an image file; and
a pdf file.

17. The system of claim 15 , wherein the selected test channel comprises one of:
an email channel;
a network channel;
an endpoint channel;
a web channel; and
a cloud channel.

18. The system of claim 17 , wherein transmitting the one or more test files via the selected test channel comprises one of:
sending an email comprising the one or more test files;
entering the one or more test files or data from the one or more test files into a network chat box;
downloading the one or more test files to a specified device;
uploading the one or more test files to a website;
inputting data from the one or more test files into a fillable form hosted by a website; and
staging the one or more test files in a specified cloud storage location.

19. The system of claim 15 , wherein the instructions are further configured to cause the system to:
receive, from the user device, an indication of one or more of a specified delimiter, a specified volume and a specified keyword,
wherein generating the set of test data comprises generating sample data that comprises the one or more of the specified delimiters, the specified volume and the specified keyword.

Assignees

• Capital One Services Llc

Inventors

• Flaherty Kyle
• Jaffri Humza
• Fox John
• Schenkein Scott Jason
• Hall Katherine
• Dasilva David

Classifications

• G06F11/3688 Primary

  for test execution, e.g. scheduling of test suites · CPC title

• G06F11/3698

  Environments for analysis, debugging or testing of software · CPC title

• G06F11/3684 Primary

  for test design, e.g. generating new test cases · CPC title