Symantec Corporation

Ca, Inc.

Dhananjay Namdeo Dodke

Sarin Sumit Manmohan

Sumesh Jaiswal

Sumit Manmohan Sarin

Bishnu Chaturvedi

Kedar Apte

Vipul Goel

Amit Dhotre

The disclosed computer-implemented method for enforcing data loss prevention policies on endpoint devices may include (i) detecting that an endpoint device has terminated a connection with a protected network that is protected by a network-level data loss prevention system and has connected to an external network that is not protected, (ii) switching, in response to detecting that the endpoint device has connected to the external network, from an in-network data loss prevention policy to an out-of-network data loss prevention policy, (iii) detecting an inbound data transfer to the endpoint device, (iv) determining that the inbound data transfer comprises a transfer from a protected source that is protected by the out-of-network data loss prevention policy, and (v) performing a security action in response to determining that the inbound data transfer to the endpoint device comprises the transfer from the protected source. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for enforcing data loss prevention policies on endpoint devices

A method for managing data loss prevention policies for applications may include 1) maintaining, in at least one database, a categorization of at least one application as either a business application or a personal application, 2) assigning, in the database, a data loss prevention policy to the application based on the categorization of the application in the database as either a business application or a personal application, 3) detecting that the application is attempting to access sensitive data, and 4) applying, in response to the detected attempt by the application to access sensitive data, the data loss prevention policy assigned to the application to the detected attempt by the application to access sensitive data. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for managing data loss prevention policies for applications

A computer-implemented method for data loss prevention of unidentifiable and unsupported object types may include (1) monitoring, through at least one filter, data input to an application during execution, (2) scanning, through a data loss prevention scanner, the data input to the application to detect whether the data includes sensitive data that is protected by a data loss prevention policy, (3) flagging, based on the scanning, the application as having accessed the sensitive data that is protected by the data loss prevention policy, (4) detecting that the application is requesting to output a data object in a format that obscures underlying content, and (5) performing, by a data loss prevention program, a remedial action to prevent loss of the sensitive data based on both flagging the application and detecting that the application is requesting to output the data object in the format that obscures underlying content.

Systems and methods for data loss prevention of unidentifiable and unsupported object types

The disclosed computer-implemented method for capturing input from users to prevent data loss may include (1) intercepting, as part of a data-loss-prevention application, user input intended for a data-processing application that would, if received by the data-processing application, cause the data-processing application to perform an operation on data that may violate a data-loss-prevention policy, (2) upon intercepting the user input, causing the data-processing application to perform an alternative operation on the data that makes the data accessible to the data-loss-prevention application, (3) scanning, while the data-processing application is prevented from performing the operation, the data for compliance with the data-loss-prevention policy, (4) determining, based on a result of the scanning, that the data complies with the data-loss-prevention policy, and (5) causing, in response to determining that the data complies with the data-loss-prevention policy, the data-processing application to perform the operation. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for capturing input from users to prevent data loss

A method and apparatus for scanning protected files for violations of a Data Loss Prevention (DLP) policy is described. In one method, an inventory of protected files in the computing system is created. The inventory stores hashes and policy violation statuses of the protected files. The method obtains a running instance of a data object corresponding one of the protected files when the one protected is created, opened, or saved. The method extracts decrypted data from the running instance of the data object and scans the decrypted data to detect a violation of a DLP policy. The method creates a hash of the one protected file and stores the hash and a policy violation status of the one protected file. The method monitors the protected files of the inventory. When the method detects a transfer of one of the protected files being monitored, the method performs an action when the policy violation status indicates that the one protected file violates the DLP policy.

Scanning protected files for violations of a data loss prevention policy

A method and apparatus for scanning protected files for violations of a Data Loss Prevention (DLP) policy is described. In one embodiment, a protected file scanning tool monitors protected files in a computing system, and when one of the protected files is created, opened, or saved, the protected file scanning tool obtains a running instance of a data object, corresponding the protected file, from a data store that stores information to track objects that are currently running on the computing system. The protected file scanning tool extracts the decrypted data from the obtained data object, and scans the decrypted data to detect a violation of a DLP policy.

Growing community of inventors

Pune Maharashtra, India

Dhananjay Namdeo Dodke