Data exfiltration system and methods

A system comprising:

• a local network having a first device and a second device connected thereto, the first device and the second device each configured to:
• implement a workspace, wherein the workspace is configured to enable operation of a first set of one or more applications or processes via a first memory space;
• implement an isolated computing environment, the isolated computing environment being configured to enable operation of a second set of one or more applications or processes via a second memory space;
• isolate the isolated computing environment from the workspace using an internal isolation firewall, the internal isolation firewall being configured to prevent data from being communicated between the isolate computing environment and the workspace without an explicit user input;
• and
• implement a host-based firewall configured to block incoming traffic;
• an authorization device configured to:
• receive authentication credentials from the isolated computing environment;
• and
• authenticate the isolated computing environment using the received authentication credentials;
• a border firewall configured to prevent unauthorized communication between the local network and untrusted network destinations;
• and
• a proxy device configured to proxy communications between the untrusted network destinations and the respective authenticated isolated computing environments of the first and second devices,
• wherein when malware is received by the first device or the second device, the system configured to implement one or more mechanisms to prevent, using one or more of the internal isolation firewall, the host-based firewall, the authorization device, the proxy device, or the border firewall, the malware from exfiltrating data to a network destination.