arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2012.14111cs.CRcs.NI
收藏

实施安全系统,通过流量检查检测和防止组织中的数据丢失/泄漏

Implementation of Security Systems for Detection and Prevention of Data Loss/Leakage at Organization via Traffic Inspection

Mir Hassan, Chen Jincai, Adnan Iftekhar, Adnan Shehzad, Xiaohui Cui

摘要:

数据丢失/泄漏防护(DLP)仍然是许多大型组织的主要问题。有许多新兴的安全连接场景和无限数量的解决方案。当今企业的主要关注点是保护机密信息,因为泄露机密数据意味着敏感信息落入竞争对手手中。需要保护不同的数据类型。然而,我们的研究只集中在动态数据(DIM),即通过网络传输的数据。本文中的研究和场景展示了最近对信息和数据泄漏事件的调查,揭示了其重要性,并提出了一种模型解决方案,该解决方案将以前的方法与高级内容检查器基于机器学习的新模式匹配方法相结合,以保护组织内的数据,然后采取相应的措施。本文还提出了一种网关级别的DLP部署设计,该设计使用squid代理服务器和ICAP服务器显示数据在到达最终目的地之前如何通过中间通道移动。

英文摘要:

Data Loss/Leakage Prevention (DLP) continues to be the main issue for many large organizations. There are multiple numbers of emerging security attach scenarios and a limitless number of overcoming solutions. Today's enterprises' major concern is to protect confidential information because a leakage that compromises confidential data means that sensitive information is in competitors' hands. Different data types need to be protected. However, our research is focused only on data in motion (DIM) i-e data transferred through the network. The research and scenarios in this paper demonstrate a recent survey on information and data leakage incidents, which reveals its importance and also proposed a model solution that will offer the combination of previous methodologies with a new way of pattern matching by advanced content checker based on the use of machine learning to protect data within an organization and then take actions accordingly. This paper also proposed a DLP deployment design on the gateway level that shows how data is moving through intermediate channels before reaching the final destination using the squid proxy server and ICAP server.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑