Metadata-based data object detection and classification in cloud computing environments for data security posture management

Abstract

A system and method for classifying data objects for data security posture management (DSPM) in a cloud computing environment based on metadata are presented. The method includes detecting data objects in data sources of the cloud computing environment, wherein each data object in the data objects comprises metadata; generating metadata-derived features from the metadata, wherein the metadata-derived features include hierarchy and path features; clustering the data objects into data clusters based on a similarity determination applied to the metadata-derived features; generating, for a first data cluster of the data clusters, an aggregated cluster representation and a corresponding prompt based on metadata associated with data objects in the first data cluster; generating a cluster classification for the first data cluster based on a result of processing the corresponding prompt with a language model; and generating data findings based on the cluster classification and classification results.