Screen Capture Data Loss Prevention via Document Scanning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data loss prevention systems are ineffective in detecting and blocking screen captures of sensitive data, as images generated from screen shots are harder to process and often evade detection, allowing unauthorized theft of confidential information.
Innovation Solution
A data loss prevention module is implemented that detects screen capture events, identifies visible windows and documents on a computer screen, scans these documents for sensitive data, and blocks the screen capture if sensitive information is found, using techniques such as keyboard hooks or API hooks to intercept and analyze the screen capture process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If current data loss prevention systems scan files for sensitive data, then sensitive data in traditional formats can be detected, but screen capture images evade detection and data loss occurs
Solution Approach 1:
The system performs preliminary actions by detecting screen capture events before the captured data can be exfiltrated. The data loss prevention module intercepts screen capture commands, identifies the captured window, and scans the underlying document file for sensitive data before the screenshot is completed and potentially transmitted, thus preventing data loss in advance
Solution Approach 2:
The patent introduces an intermediary mechanism that bridges the gap between traditional file-based detection and screen capture detection. The data loss prevention module acts as an intermediary layer that monitors screen capture events, correlates them with underlying document files, and applies scanning to the source files rather than attempting to analyze the captured images directly
2Reliability
If all screen captures are blocked to prevent data loss, then security is enhanced, but legitimate user productivity is reduced
Solution Approach 1:
The system applies local quality by differentiating between sensitive and non-sensitive documents. Instead of uniformly blocking all screen captures, the data loss prevention module scans the underlying document file and applies selective blocking only when sensitive data is detected, allowing legitimate screen captures of non-sensitive content to proceed uninterrupted
Solution Approach 2:
The system implements feedback by scanning the underlying document file and using the scan results to determine whether to block the screen capture. The data loss prevention module receives feedback from the sensitive data scan and adjusts its blocking decision accordingly, blocking only when sensitive data is present and allowing legitimate captures when no sensitive data is detected
Data Source
AI summary
Disclosed are methods and apparatus for protecting computers from data loss involving screen capture. Screen capture events are detected in a computer. Documents that are visible on a computer screen are identified. Files of the visible documents are identified and scanned for sensitive data to determine whether the screen capture events are targeting contents of sensitive documents.