Symantec Corporation

Amit Shinde

Sumit Manmohan Sarin

Sarin Sumit Manmohan

Bishnu Chaturvedi

Sumant Modak

Rajesh Upadhyay

Jeff Graham

Techniques describe preventing sensitive data from being misappropriated during a clipboard operation. A copy operation for data being copied to a clipboard is intercepted. Information describing a first application from which the data was copied is retrieved. The data and the information are stored into the clipboard. A paste operation is evaluated based on the data, and the information is evaluated against a policy to determine whether the paste operation should be blocked.

Technique for data loss prevention through clipboard operations

Techniques describe preventing sensitive data from being misappropriated during a clipboard operation. A copy operation for data being copied to a clipboard is intercepted. Information describing a first application from which the data was copied is retrieved. The data and the information is stored into the clipboard. A paste operation is evaluated based on the data and the information is evaluated against a policy to determine whether the paste operation should be blocked.

A computer-implemented method for preventing data loss via temporary-file generating applications may include (1) identifying an application that is configured to update a file by generating a temporary file that includes updated content of the file and replacing the file with the temporary file, (2) detecting an attempt by the application to update the file by detecting an attempt by the application to generate the temporary file and/or an attempt by the application to replace the file with the temporary file, and (3) performing, in response to detecting the attempt by the application to update the file, a data-loss-prevention action on the file instead of the temporary file. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for preventing data loss via temporary-file generating applications

Method and apparatuses for detecting violations of data loss prevention (DLP) in NTFS removable media and non-NTFS removable media are described. In NTFS, when an application opens a data file, a DLP file system filter driver internally opens the same data file using file system transaction and is transparent to the application. Application read/writes are redirected to the remote transaction. When the application tries to close the file, the DLP agent scans the data being written to the file for detection of violations and commits or aborts the remote transaction depending upon the detection of a violation of the policy.

Data loss prevention (DLP) through removeable media

A data loss prevention (DLP) agent manages DLP polices of a shared network file system. The DLP agent identifies a request by an application to access a file from a shared storage device over a network, and enables monitoring on a local data store to detect file system requests by the application in response to the identifying. The DLP agent also analyzes data associated with the file to determine if the data violates a data loss prevention (DLP) policy, and enforces a response rule associated with the file if the data associated with the file violates the DLP policy.

Data loss prevention of a shared network file system

A computer-implemented method for data loss prevention may include: 1) indentifying an external device, 2) intercepting a write attempt to a file on the external device, 3) creating a sandbox version of the file, 4) performing the write attempt on the sandbox version of the file, and then 5) analyzing the sandbox version of the file for potential data-loss violations. Various other methods, systems, and computer-readable media are also disclosed.

Growing community of inventors

Maharashtra, India

Amit Shinde