Data leak prevention using content based segmentation scanning

A non-transitory computer-readable storage medium storing instructions that, when executed by a processor in an apparatus, cause the apparatus to perform a method for preventing data leaks from a network, the method comprising:

• receiving a first set of labels that were computed based on a set of sensitive files or sensitive data that includes sensitive information, wherein each label in the first set of labels corresponds to a data segment in the set of sensitive files or sensitive data;
• receiving data that is to be checked for sensitive information;
• determining a second set of labels based on the data, wherein the second set of labels is used to de-duplicate the data;
• matching the second set of labels with the first set of labels;
• determining whether or not the data includes sensitive information based on comparing a count of matching labels with a threshold;
• performing a data leak prevention action if the data includes sensitive information, wherein the data leak prevention action comprises blocking the data and/or altering a network administrator;
• and
• performing, de-duplication and forwarding the data to another apparatus if the data does not include sensitive information.

An apparatus, comprising:

• a processor;
• and
• a non-transitory computer-readable storage medium storing instructions that, when executed by the processor, cause the apparatus to perform a method for preventing data leaks from a network, the method comprising:
• receiving a first set of labels that were computed based on a set of sensitive files or sensitive data that includes sensitive information, wherein each label in the first set of labels corresponds to a data segment in the set of sensitive files or sensitive data;
• receiving data that is to be checked for sensitive information;
• determining a second set of labels based on the data, wherein the second set of labels is used to de-duplicate the data;
• matching the second set of labels with the first set of labels;
• determining whether or not the data includes sensitive information based on comparing a count of matching labels with a threshold;
• performing a data leak prevention action if the data includes sensitive information, wherein the data leak prevention action comprises blocking the data and/or altering a network administrator;
• and
• performing de-duplication and forwarding the data to another apparatus if the data does not include sensitive information.