Systems and methods for data loss prevention of unidentifiable and unsupported object types
摘要
說明書
In general, these data loss prevention filters may monitor data by first obtaining an entire body of data to be scanned. For example, network filter 242 may obtain one or more network packets and extract metadata, header information, payload information, and/or underlying content from the network packets. Similarly, file system filter 244 may obtain files and/or content stored within the files corresponding to one or more file access requests, as outlined above. Additionally, network filter 242 may obtain one or more data objects (e.g., strings of text, images, multimedia clips, HTML segments, and/or other data structure instances) that have been cut, copied, and/or pasted using an operating system clipboard or other clipboard for sharing data between applications. Furthermore, inter-process filter 246 may filter data received from other applications through an operating system inter-process communication module, as discussed above. In some embodiments, the data loss prevention filters may transmit identified sensitive data to a data application radar, which may maintain a record of correspondence between applications, application identifiers, one or more items of sensitive data accessed by the respective applications, and/or status identifiers indicating whether the respective applications have accessed sensitive data.
