BACKGROUND

Aspects of the disclosure relate to deploying digital data processing systems, providing information security, and preventing unauthorized access to secure resources of information systems. In particular, one or more aspects of the disclosure relate to monitoring source code repository data in real-time to protect sensitive information and provide entity-specific alerts.

Enterprise organizations may utilize various computing infrastructure to maintain large data sets, which may include confidential information and/or other sensitive data that is created and/or used for various purposes. Ensuring that this confidential information and/or other sensitive data remains within the enterprise organization and under the control of the enterprise organization may be critically important to protecting the integrity and confidentiality of the underlying information, as well as to ensuring privacy and security for enterprise users and customers. In some instances, however, it may be difficult to ensure the integrity and confidentiality of the information associated with enterprise data sets while also attempting to optimize the resource utilization, bandwidth utilization, and efficient operations of the computing infrastructure involved in maintaining and controlling access to the data, particularly in instances where software developers associated with an enterprise organization utilize one or more external source code repositories.

SUMMARY

Aspects of the disclosure provide effective, efficient, scalable, and convenient technical solutions that address and overcome the technical problems associated with ensuring information security and preventing unauthorized access to resources of enterprise computer systems by monitoring source code repository data in real-time to protect sensitive information and provide entity-specific alerts.

In accordance with one or more embodiments, a computing platform having at least one processor, a communication interface, and memory may receive, via the communication interface, from an enterprise administrator user computing device associated with an enterprise organization, configuration information defining one or more criteria for identifying sensitive data of the enterprise organization. Subsequently, the computing platform may monitor external code repository server infrastructure based on the configuration information defining the one or more criteria for identifying the sensitive data of the enterprise organization. Based on monitoring the external code repository server infrastructure, the computing platform may detect that first source code received by the external code repository server infrastructure contains first sensitive information associated with the enterprise organization. In response to detecting that the first source code received by the external code repository server infrastructure contains the first sensitive information associated with the enterprise organization, the computing platform may generate a notification comprising information indicating that the first sensitive information associated with the enterprise organization has been detected at the external code repository server infrastructure. Then, the computing platform may send, via the communication interface, to the enterprise administrator user computing device associated with the enterprise organization, the notification comprising the information indicating that the first sensitive information associated with the enterprise organization has been detected at the external code repository server infrastructure.

In some embodiments, receiving the configuration information defining the one or more criteria for identifying the sensitive data of the enterprise organization may include receiving one or more first templates associated with exact matches of secure enterprise data and one or more second templates associated with close matches of secure enterprise data.

In some embodiments, receiving the configuration information defining the one or more criteria for identifying the sensitive data of the enterprise organization may include receiving at least one template for identifying user credentials associated with the enterprise organization. In some embodiments, receiving the configuration information defining the one or more criteria for identifying the sensitive data of the enterprise organization may include receiving at least one template for identifying passwords associated with the enterprise organization.

In some embodiments, receiving the configuration information defining the one or more criteria for identifying the sensitive data of the enterprise organization may include receiving at least one template for identifying application programming interface (API) keys associated with the enterprise organization. In some embodiments, receiving the configuration information defining the one or more criteria for identifying the sensitive data of the enterprise organization may include receiving at least one template for identifying proprietary algorithms associated with the enterprise organization or data patterns associated with the enterprise organization.

In some embodiments, monitoring the external code repository server infrastructure may include scanning incoming source code files received by the external code repository server infrastructure from one or more enterprise user computing devices.

In some embodiments, detecting that the first source code received by the external code repository server infrastructure contains the first sensitive information associated with the enterprise organization may include executing a false-positive filtering process on the first source code received by the external code repository server infrastructure. In some embodiments, detecting that the first source code received by the external code repository server infrastructure contains the first sensitive information associated with the enterprise organization may include detecting that the first source code received by the external code repository server infrastructure contains the first sensitive information associated with the enterprise organization in near real-time as the first source code is received by the external code repository server infrastructure.

In some embodiments, sending the notification comprising the information indicating that the first sensitive information associated with the enterprise organization has been detected at the external code repository server infrastructure may include sending the notification comprising the information indicating that the first sensitive information associated with the enterprise organization has been detected at the external code repository server infrastructure in near real-time as the first source code is received by the external code repository server infrastructure.

In some embodiments, the computing platform may generate a summary report comprising information associated with second sensitive information associated with the enterprise organization that has been detected at the external code repository server infrastructure. Subsequently, the computing platform may send, via the communication interface, to the enterprise administrator user computing device associated with the enterprise organization, the summary report comprising the information associated with the second sensitive information associated with the enterprise organization that has been detected at the external code repository server infrastructure.

In some embodiments, after detecting that the first source code received by the external code repository server infrastructure contains the first sensitive information associated with the enterprise organization, the computing platform may initiate an automatic deletion process on the external code repository server infrastructure to remove the first sensitive information associated with the enterprise organization from the external code repository server infrastructure.

In some embodiments, after detecting that the first source code received by the external code repository server infrastructure contains the first sensitive information associated with the enterprise organization, the computing platform may generate one or more commands directing the external code repository server infrastructure to hold the first source code for a manual review process and prevent one or more users from accessing the first source code until the manual review process is completed.

In some embodiments, after detecting that the first source code received by the external code repository server infrastructure contains the first sensitive information associated with the enterprise organization, the computing platform may identify a first enterprise user computing device as a source of the first source code. Based on identifying the first enterprise user computing device as the source of the first source code, the computing platform may generate an alert for the first enterprise user computing device indicating that the first source code received by the external code repository server infrastructure contains the first sensitive information associated with the enterprise organization. Subsequently, the computing platform may send, via the communication interface, to the first enterprise user computing device, the alert generated for the first enterprise user computing device indicating that the first source code received by the external code repository server infrastructure contains the first sensitive information associated with the enterprise organization.

In some embodiments, after detecting that the first source code received by the external code repository server infrastructure contains the first sensitive information associated with the enterprise organization, the computing platform may update the one or more criteria for identifying the sensitive data of the enterprise organization based on one or more features of the first source code received by the external code repository server infrastructure.

In some embodiments, updating the one or more criteria for identifying the sensitive data of the enterprise organization based on the one or more features of the first source code received by the external code repository server infrastructure may include updating one or more rules for detecting protected data associated with the enterprise organization. In some embodiments, updating the one or more criteria for identifying the sensitive data of the enterprise organization based on the one or more features of the first source code received by the external code repository server infrastructure may include updating one or more regular expressions for detecting protected data associated with the enterprise organization. In some embodiments, updating the one or more criteria for identifying the sensitive data of the enterprise organization based on the one or more features of the first source code received by the external code repository server infrastructure may include updating a machine learning classification model for detecting protected data associated with the enterprise organization.

These features, along with many others, are discussed in greater detail below.

