Data leakage prevention system, method, and computer program product for preventing a predefined type of operation on predetermined data
AssigneeMcAfee, Inc.
InventorsMANABENDRA PAUL, ABHILASH CHANDRAN
Life of this patent
Estimating the term…
Abstract
A data leakage prevention system, method, and computer program product are provided for preventing a predefined type of operation on predetermined data. In use, an attempt to perform an operation on predetermined data that is protected using a data leakage prevention system is identified. Additionally, it is determined whether a type of the operation attempted includes a predefined type of operation. Furthermore, the operation on the predetermined data is conditionally prevented based on the determination to prevent circumvention of the protection of the data leakage prevention system.
Claims25
A system comprising:
- a processor;
- and
- a computer memory on which are store instructions, comprising instructions that when executed cause the processor to:
- identify first data as data predetermined for the application of data leakage protection, the first data being identified from among second data;
- recognize a first operation requested to be performed upon first data, before the first operation is performed upon the first data;
- associate the first operation with an operation type;
- determine whether the operation type of the first operation is among a group of operation types that has been predetermined to create a security risk;
- and
- preventing the first operation from being performed on the first data if the operation type of the first operation is in the group of operation types.
A computer-readable medium on which are stored instructions, comprising instructions that when executed on a processor configure the processor to:
- identify first data from among second data for the purpose of applying data leakage protection to the first data;
- identify operations requested to be performed upon the first data, before the operations are performed upon the first data;
- detect a first operation requested to be performed upon the first data;
- determine whether the first operation is associated with potentially malicious software by comparing a type of the first operation with a list of operation types;
- and
- conditionally preventing the first operation on the first data depending upon whether the type of the first operation is an operation type that is associated with malicious software activity.
A machine accessible storage medium having instructions stored thereon, comprising instructions that when executed on a machine cause the machine to:
- determine that a first data is a type of data that has been pre-determined for data leakage protection;
- recognize operations requested to be performed upon the first data, before the operations are performed upon the first data;
- identify a first operation requested to be performed upon the first data;
- determine whether the first operation is a type of operation that has been predetermined to create a risk of data leakage;
- and
- based upon whether the first operation's type of operation has been predetermined to create a risk of data leakage, conditionally prevent the first operation on the first data upon the determination of the type of the first operation.
A method, comprising:
- applying data leakage protection to a first set of data, the first set of data existing as part of a second set of data;
- detecting, by a computing device, an attempt to perform an operation on the first set of data, the detection occurring prior to the performance of the operation;
- determining whether or not the attempted operation is associated with malicious software;
- and
- preventing the attempted operation from occurring if it is associated with malicious software;
- and
- allowing the attempted operation to occur if it is not associated with malicious software.
Dependencies are inferred from the claim text.