RBI Proxy DLP Integration for Data Leakage Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data leakage protection systems fail to fully analyze transactions when web browsers use remote browser isolation configurations, as they do not recognize the destination web application as remote and untrusted, leading to incomplete content analysis and hidden transactions.
Innovation Solution
Integrating a remote browser isolation (RBI) configuration with a Data Loss Prevention (DLP) endpoint module to create a submission request that includes metadata and client inputs, which is then processed by a DLPe module to determine whether to allow or block data transfers, ensuring complete data analysis and protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If remote browser isolation is implemented to prevent network intrusions, then security protection is improved, but data leakage detection capability deteriorates because the system does not recognize remote destinations as untrusted
Solution Approach 1:
The patent introduces an intermediary mechanism that bridges the RBI and DLP systems. The RBI proxy intercepts submissions and creates dummy requests that are routed through the DLP endpoint, enabling the DLP system to analyze content that would otherwise bypass it. This intermediary approach allows both security protection and data leakage detection to coexist without compromising either function.
2Reliability
If remote browser isolation routes all communications through a proxy, then security is improved, but transaction analysis completeness deteriorates because the DLP endpoint cannot see the actual destination
Solution Approach 1:
The patent creates a copy of the submission request in the form of a dummy request. The RBI proxy intercepts the original submission, creates a duplicate dummy request with modified destination information, and routes this copy through the DLP endpoint for analysis. This copying mechanism preserves the security benefits of RBI while enabling complete transaction analysis by the DLP system.
3Reliability
If the system blocks direct access to destination applications, then security is improved, but productivity deteriorates due to additional processing steps
Solution Approach 1:
The patent implements preliminary action by having the RBI proxy create and process dummy requests before the actual data transfer occurs. The DLP endpoint analyzes the submission content in advance through the dummy request mechanism, making security decisions beforehand. This preliminary analysis enables secure direct transfers without requiring additional real-time processing steps, thus maintaining productivity.
Data Source
AI summary
An apparatus, related devices and methods, having memory to store instructions; and a processor to execute the instructions, and the apparatus is configured to receive, by a remote browser isolation (RBI) proxy from a client device, a transfer request to send data to a destination application, wherein the client device is running an RBI agent and includes a Data Loss Prevention endpoint (DLPe) module, and wherein communications between the client device and the destination application are routed through the RBI proxy; receive a plurality of inputs to the client device associated with the transfer request; create a submission request that includes the plurality of inputs and metadata; send the submission request to the DLPe module; receive a response from the DLPe module, wherein the response includes an instruction to allow, to disallow, or to amend and allow the submission request; and process the submission request according to the instruction.