Systems and methods for data loss prevention of unidentifiable and unsupported object types
摘要
說明書
Detection module 110 may detect that the application is attempting to output the data object in a variety of ways. In general, detection module 110 may detect that the application is attempting to output the data object in a manner parallel to the manners in which monitoring module 104 and scanning module 106 monitored and scanned the application for sensitive data (e.g., performing essentially the same function to monitor application outputs instead of application inputs). For example, detection module 110 may hook the application (e.g., through a file system and/or operating system driver) to intercept attempts by the application to output data objects through one or more channels, such as the network, the file system, and/or the operating system clipboard. Accordingly, detection module 110 may include, or interface with, one or more of clipboard filter 240, file system filter 244, and network filter 242, as first discussed above.
