Data Loss Prevention Scanning User-Editable HTTP Fields
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional data loss prevention (DLP) systems face challenges in efficiently scanning network traffic, leading to increased computing resource strain and false positives due to scanning of irrelevant data.
Innovation Solution
The system identifies and scans only user-editable fields within HTTP POST requests, skipping non-user-editable fields, using metadata differentiation and a script to generate metadata for data-loss-prevention analysis, thereby reducing unnecessary scanning and resource consumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional DLP systems scan all data passing through proxies, then data loss prevention coverage is comprehensive, but computing resource strain increases significantly
Solution Approach 1:
The patent segments the data scanning process by identifying and separating user-editable fields from non-user-editable fields. The system selectively scans only the user-editable fields (such as text inputs, comments, and form fields where users can modify content) while skipping non-user-editable fields (such as automatically generated fields, metadata, and system-generated data). This segmentation approach maintains comprehensive DLP coverage for relevant data while significantly reducing computing resource strain by avoiding unnecessary scanning of irrelevant data.
2Reliability
If traditional DLP systems scan all network traffic, then detection coverage is complete, but false positives increase due to scanning irrelevant data
Solution Approach 1:
The patent applies local quality by differentiating between user-editable and non-user-editable fields within the network traffic. The system scans user-editable fields with enhanced detection precision while skipping non-user-editable fields that are unlikely to contain sensitive data. This localized scanning approach improves measurement precision by focusing detection efforts on areas most likely to contain sensitive information, thereby reducing false positives while maintaining adequate detection coverage.
3Reliability
If traditional DLP systems scan all form submissions, then data protection is comprehensive, but scanning time and processing speed decrease
Solution Approach 1:
The patent implements partial action by scanning only the necessary portion of form submissions - specifically user-editable fields - rather than scanning the entire form submission including non-user-editable fields. This partial scanning approach maintains adequate data protection coverage for fields where sensitive data is most likely to be entered or modified, while significantly improving scanning speed and processing throughput by avoiding unnecessary analysis of irrelevant fields.
Data Source
AI summary
A computer-implemented method for data loss prevention may include 1) identifying a hypertext-transfer-protocol POST request from a client system to a hypertext-transfer-protocol server, 2) identifying metadata relating to the hypertext-transfer-protocol POST request differentiating at least one user-editable field within the hypertext-transfer-protocol POST request from at least one non-user-edited field within the hypertext-transfer-protocol POST request, 3) subjecting the user-editable field, based on the metadata, to a data-loss-prevention analysis and omitting the non-user-edited field from the data-loss-prevention analysis, and 4) performing a data-loss-prevention action based on the data-loss-prevention analysis. Various other methods, systems, and computer-readable media are also disclosed.