Data Leakage Prevention Using Baseline Data Maps
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional data transfer control mechanisms are limited in preventing data leakage, which includes theft and unauthorized disclosure, and do not effectively address potential data loss during transmission.
Innovation Solution
A system and method that utilize a data map to identify and prevent data leakage by generating a map of data stored on systems, comparing it to a baseline map, and taking actions based on policy-defined thresholds to secure data from unauthorized transfer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional transfer control mechanisms are used to prevent data leakage, then data security is improved, but the ability to detect and prevent data loss during transmission is insufficient
Solution Approach 1:
The system creates a baseline map of data before transmission occurs, establishing a reference state in advance. This preliminary action enables comparison with post-transmission states to detect any unauthorized changes or losses that traditional mechanisms would miss.
Solution Approach 2:
The system continuously monitors and compares current data states against the baseline map, creating a feedback loop that detects deviations. This feedback mechanism identifies data loss or unauthorized modifications during transmission, enabling real-time security responses that traditional one-way control mechanisms cannot provide.
2Reliability
If comprehensive data monitoring is implemented to detect unauthorized transfers, then data leakage prevention is improved, but system complexity increases
Solution Approach 1:
Instead of monitoring every data operation in real-time, the system creates simplified copies or representations of data states (maps) at key points. These maps capture essential information about data location, type, and state without requiring complex continuous monitoring of all data operations, reducing system complexity while maintaining detection capability.
Solution Approach 2:
The monitoring system is divided into discrete components: baseline map creation, current state mapping, and comparison logic. Each component handles a specific aspect of data monitoring independently, making the overall system more manageable and less complex than a monolithic monitoring approach would require.
Data Source
AI summary
A system, method, and computer program product are provided for preventing data leakage utilizing a map of data. In use, information describing data stored on at least one system is received. To this end, a map of the data is generated, utilizing the information. Further, data leakage is prevented, utilizing the map.