Abstract: A customer gains access to cloud networking resources through a customer device, such as a router providing a point of presence (POP) to the network. Due to limitations of remote equipment such as routers, complete routing information for data packets may not be available from the origin due to the dynamic nature of the network and security requirements. Proxy machines are placed at the network edge that serve as a proxy for routing network data packets to the virtual network Placing proxy machines at the network edge requires space, power and maintenance of the programmable processing machines serving as proxies. Techniques for bypassing proxy machines to reduce network congestion and latency are described. Data packets are selected to bypass proxies when additional routing information is not needed for the packet. Proxy machines may be implemented as virtual machines within a data center hosting the virtual network.

Abstract: A method for implementing data loss prevention (DLP) includes: generating an asset lineage map from file system metadata; identifying, based on the asset lineage map, an input feature linked to the asset, a type of the asset, and a plurality of activities linked to the asset; obtaining a sensitivity score for the asset based on the input feature and the type of the asset; obtaining, based on the plurality of activities, a malicious score and a data loss score for the asset; determining a user level of a user; and initiating implementation of a first DLP policy for the user based on the user level, the malicious score, the data loss score, and the sensitivity score.

Abstract: A method for implementing data loss prevention (DLP) includes: generating an asset lineage map from file system metadata; identifying, based on the asset lineage map, an input feature linked to the asset, a type of the asset, and a plurality of activities linked to the asset; obtaining a sensitivity score for the asset based on the input feature and the type of the asset; obtaining, based on the plurality of activities, a malicious score and a data loss score for the asset; determining a user level of a user; and initiating implementation of a first DLP policy for the user based on the user level, the malicious score, the data loss score, and the sensitivity score.

Abstract: A method for implementing data loss prevention (DLP) includes: generating an asset lineage map from file system metadata; identifying, based on the asset lineage map, an input feature linked to the asset, a type of the asset, and a plurality of activities linked to the asset; obtaining a sensitivity score for the asset based on the input feature and the type of the asset; obtaining, based on the plurality of activities, a malicious score and a data loss score for the asset; determining a user level of a user; and initiating implementation of a first DLP policy for the user based on the user level, the malicious score, the data loss score, and the sensitivity score.