Data Access Monitoring and Control

A computer program product comprising a computer readable storage medium having a computer readable program for monitoring and controlling data access stored therein, wherein the computer readable program, when executed on a device security system agent installed in a server separate from a security system, causes the computing device to:

• responsive to intercepting a response from a server to a request for information from a client device, apply pattern matching using a predefined set of sensitive data pattern rules to identify at least one sensitive data access included in the response;
• determine whether the at least one sensitive data access matches one or more of the predefined set of sensitive data pattern rules;
• responsive to the at least one sensitive data access matching one or more of the predefined set of sensitive data pattern rules, modify the request from the client by marking the at least one sensitive data access as sensitive thereby forming a modified request;
• and
• send the modified request with the at least one marked sensitive data access to the security system thereby causing the security system to process the modified request without access the sensitive data associated with the at least one marked sensitive data access due to the at least one marked sensitive data access in the modified request.

A security system agent apparatus installed in a server separate from a security system for monitoring and controlling data access comprising:

• a processor;
• and
• a memory coupled to the processor, wherein the memory comprises instructions which, when executed by the processor, cause the processor to:
• responsive to intercepting a response from a server to a request for information from a client device, apply pattern matching using a predefined set of sensitive data pattern rules to identify at least one sensitive data access included in the response;
• determine whether the at least one sensitive data access matches one or more of the predefined set of sensitive data pattern rules;
• responsive to the at least one sensitive data access matching one or more of the predefined set of sensitive data pattern rules, modifies the request from the client by marking the at least one sensitive data access as sensitive thereby forming a modified request;
• and
• send the modified request with the at least one marked sensitive data access to the security system thereby causing the security system to process the modified request without access the sensitive data associated with the at least one marked sensitive data access due to the at least one marked sensitive data access in the modified request.