System and method for tracking information leakage at endpoint

A system for tracking an information leakage of an endpoint, comprising:

• a management server comprising a detection pattern generator which generates detection pattern information for detecting a leakage of user personal information and keyword information with respect to a target to be managed, a database which stores the detection pattern information, a server communication portion which transmits the detection pattern information to the endpoint terminal connected through a network, and a server controller which controls them;
• and
• an endpoint terminal comprising a storage which stores the detection pattern information provided from the management server, a first detection activity performer which monitors generation and change of a file by using the detection pattern information, searches for whether data to be detected is stored, and performs a first detection activity through matching information stored in a heap memory of a currently-executed process with the detection pattern information, a second detection activity performer which performs a second detection activity according to monitoring of a particular application program interface (API) according to process execution, a leakage response executer which executes an information leakage response process corresponding to first detection activity information obtained by performing the first detection activity and second detection activity information according to the second detection activity, a terminal communication portion which transmits the first detection activity information and the second detection activity information to the management server, and a terminal controller which controls them,
• wherein the database of the management server stores leakage information corresponding to the first detection activity information and the second detection activity information transmitted from the endpoint terminal.