Nicholas John Maxwell

US Patent:

20230038796, Feb 9, 2023

Filed:

Aug 4, 2022

Appl. No.:

17/881377

Inventors:

- Mountain View CA, US
Swapnil Bhalode - Fremont CA, US
Siddhesh Yawalkar - Fremont CA, US
Hemant Puri - Fremont CA, US
Deepika Dhruv Gajaria - Campbell CA, US
Surabhi Sinha - San Jose CA, US
Nicholas Maxwell - Fremont CA, US
Michael S. Rogers - Aldie VA, US

International Classification:

G06F 11/07
G06F 11/36

Abstract:

Various embodiments comprise systems and methods to generate privacy audit reports for web applications. In some examples a computing system comprises a data extraction component, a risk assessment component, and an exposure component. The data extraction component crawls a web application and identifies data, data exposure points, and security policies implemented by the web application. The risk assessment component generates a risk score for the web application based on the amount data, the data sensitivity, the amount and type of data exposure points, and the security policies. The risk assessment component generates the privacy audit report for the web application. The privacy audit report comprises the risk score, an inventory of data types, an inventory of the data exposure points, and a graphical representation of historical risk scores. The exposure component transfers the privacy audit report for delivery to an operator of the web application.