Network-aware endpoint data loss prevention for web transactions

A computing system, comprising:

• at least one memory that stores program code;
• and
• a processing system, comprising one or more processors, configured to receive the program code from the at least one memory and, in response to at least receiving the program code, to:
• intercept an event in the OS, the event being a read of or a write to a file;
• determine that a process executing at the computing device and causing the event to occur is an instance of a web browser application;
• retrieve a uniform resource locator (URL) corresponding to the event and to the instance of the web browser application;
• and
• perform a data loss prevention (DLP) action against the event based at least on the URL and an identifier of the file.

A computer-readable storage medium having program instructions recorded thereon that, when executed by a processing system, perform a method by a file system filter in an operating system (OS), the method comprising:

• intercepting an event in the OS, the event being a read of or a write to a file;
• determining that a process executing at the computing device and causing the event to occur is an instance of a web browser application;
• retrieving a uniform resource locator (URL) corresponding to the event and to the instance of the web browser application;
• and
• performing a data loss prevention (DLP) action against the event based at least on the URL and an identifier of the file.