Security monitoring

Abstract

Disclosed are systems, apparatus, methods, and computer readable media for determining a confidentiality for a site record. In one embodiment, a site record for analysis is identified at a computing device. The computing device may identify a source for the site record and determine, based on the source, a source-based confidentiality for the site record. The computing device may identify, based on the site record, a designated confidentiality for the site record, and determine that the designated confidentiality is different from the source-based confidentiality. Responsive to the determination that the designated confidentiality is different from the source-based confidentiality, the computing device may store the source-based confidentiality for the site record on a storage medium.

What is claimed is: 
     
         1 . A method of determining a confidentiality for a site record, the method comprising:
 identifying, at a computing device, a site record for analysis;   identifying a source for the site record;   determining, based on the source, a source-based confidentiality for the site record;   identifying, based on the site record, a designated confidentiality for the site record;   determining that the designated confidentiality is different from the source-based confidentiality; and   responsive to the determination that the designated confidentiality is different from the source-based confidentiality, storing the source-based confidentiality for the site record on a storage medium.   
     
     
         2 . The method of  claim 1 , wherein determining the source-based confidentiality comprises:
 accessing a list of designated confidentiality levels, each associated with a respective one of a plurality of site record sources.   
     
     
         3 . The method of  claim 1 , wherein determining the source-based confidentiality comprises:
 determining a source type of the source; and   identifying a confidentiality level based on the source type.   
     
     
         4 . The method of  claim 3 , wherein the source type indicates whether the source is internal or external to an on-demand services environment. 
     
     
         5 . The method of  claim 3 , wherein the source type indicates whether the source is accessible to an entity accessing an on-demand services environment. 
     
     
         6 . The method of  claim 1 , wherein the source-based confidentiality is determined based at least in part on public accessibility of the source of the site record. 
     
     
         7 . The method of  claim 1 , wherein the source-based confidentiality is determined based at least in part on a trust level of the source, the trust level indicating a degree to which the source is trusted in an on-demand services environment. 
     
     
         8 . The method of  claim 1 , wherein the designated confidentiality is determined based on identifying confidential information included in the site record. 
     
     
         9 . The method of  claim 1 , wherein the designated confidentiality has a default or initial level. 
     
     
         10 . The method of  claim 1 , further comprising:
 storing contextual information for the site record, the contextual information including one or both of: the source, and a time at which determination of the source-based confidentiality was last conducted.   
     
     
         11 . The method of  claim 1 , wherein the site record is associated with a network address. 
     
     
         12 . The method of  claim 1 , wherein the site record is associated with a site accessible via an on-demand services environment, the site being one of: a computer system, a program, a configuration, a web site, or a computing services construct. 
     
     
         13 . The method of  claim 1 , wherein the source of the site record is one of: a server log, an audit trail, information internal to an on-demand services environment, an Internet search engine, an Internet spider cache, a public network, an information cache or repository, or a communication received by an entity of an on-demand services environment. 
     
     
         14 . One or more servers for determining a confidentiality for a site record, the one or more servers comprising:
 one or more processors operable to cause one or more instructions to be executed to:
 identify, at a computing device, a site record for analysis; 
 identify a source for the site record; 
 determine, based on the source, a source-based confidentiality for the site record; 
 identify, based on the site record, a designated confidentiality for the site record; 
 determine that the designated confidentiality is different from the source-based confidentiality; and 
 responsive to the determination that the designated confidentiality is different from the source-based confidentiality, store the source-based confidentiality for the site record on a storage medium. 
   
     
     
         15 . The one or more servers of  claim 14 , wherein determining the source-based confidentiality comprises:
 accessing a list of designated confidentiality levels, each associated with a respective one of a plurality of site record sources.   
     
     
         16 . The one or more servers of  claim 14 , the one or more processors further operable to cause one or more instructions to be executed to:
 store contextual information for the site record, the contextual information including one or both of: the source, and a time at which determination of the source-based confidentiality was last conducted.   
     
     
         17 . A non-transitory computer-readable storage medium storing instructions executable by a server configured to cause a method to be performed for determining a confidentiality for a site record, the method comprising:
 identifying a site record for analysis;   identifying a source for the site record;   determining, based on the source, a source-based confidentiality for the site record;   identifying, based on the site record, a designated confidentiality for the site record;   determining that the designated confidentiality is different from the source-based confidentiality; and   responsive to the determination that the designated confidentiality is different from the source-based confidentiality, storing the source-based confidentiality for the site record on a storage medium.   
     
     
         18 . The non-transitory computer-readable storage medium of  claim 17 , wherein determining the source-based confidentiality level comprises:
 accessing a list of designated confidentiality levels, each associated with a respective one of a plurality of site record sources.   
     
     
         19 . The non-transitory computer-readable storage medium of  claim 17 , the method further comprising:
 storing contextual information for the site record, the contextual information including one or both of: the source, and a time at which determination of the source-based confidentiality was last conducted.   
     
     
         20 . A method of determining a confidentiality for a site record, the method comprising:
 identifying, at a computing device, a site record for analysis;   identifying a source for the site record;   determining, based on the source, a source-based confidentiality for the site record;   identifying, based on the site record, a designated confidentiality for the site record;   determining that the designated confidentiality is not higher than the source-based confidentiality; and   responsive to a determination that the designated confidentiality is not higher than the source-based confidentiality, continuing to use the designated confidentiality for the site record.