BACKGROUND

Aspects of the disclosure relate to electrical computers, systems, and devices for providing and performing dynamic access evaluation and control functions.

Large scale enterprises often host various customer facing systems and applications. Unauthorized users often use credential harvesting to gain access to systems, applications, data, and the like. Credential harvesting may include using compromised credentials, such as those obtained from unauthorized sources, to attempt unauthorized access to systems, applications and/or data. In many examples, unauthorized users may attempt an initial login to determine whether credentials are valid. If so, the credentials may be used to access systems, accounts, data, and the like, without user authorization, may be sold to other unauthorized actors, or the like.

In order to combat this unauthorized activity, systems may monitor authentication portals to detect attempts to takeover an account or otherwise access data without authorization. This data may then be used to identify potential unauthorized activity and/or execute one or more mitigating actions.

Account takeovers can be damaging to individual users. For instance, users may suffer financial damages as well as other types of damages. However, if an account takeover is executed on an employee account (e.g., an employee of the entity who may also have an account for the external-facing system) the damage may be even greater. For instance, if that employee has privileged access (e.g., the ability to bypass controls), the damage any impact of the account takeover may impact both the user individually and the entity of which he is an employee. Accordingly, it may be advantageous to identify vulnerable accounts and employees having privileged access to those accounts and execute additional authentication requirements in order to mitigate impact of the unauthorized activity.

SUMMARY

The following presents a simplified summary in order to provide a basic understanding of some aspects of the disclosure. The summary is not an extensive overview of the disclosure. It is neither intended to identify key or critical elements of the disclosure nor to delineate the scope of the disclosure. The following summary merely presents some concepts of the disclosure in a simplified form as a prelude to the description below.

Aspects of the disclosure provide effective, efficient, scalable, and convenient technical solutions that address and overcome the technical problems associated with dynamically evaluating and controlling access to one or more systems, applications, or the like.

In some examples, unauthorized activity data may be received. The unauthorized activity data may be analyzed to identify one or more vulnerable applications. Users of the one or more vulnerable applications may then be identified. Entitlements for the one or more vulnerable applications may be identified and, in particular, entitlements having privileged access may be identified. Users having entitlements with privileged access may be identified and one or more modified authentication requirements may be implemented.

These features, along with many others, are discussed in greater detail below.

