System, method, and apparatus for data loss prevention

Abstract

Disclosed is a computer security device configured to monitor data traffic between computing devices on a local area network and an external network in order to protect the local area network against unauthorized access and data exfiltration. Such computer security device includes each of a data transport module, a management information module, and a data storage module, each of which are operable independently of the other modules, but which modules together form the single computer security device. The computer security device is configured for connection between a router on a local network that is to be protected and a wide area network, such as the Internet, which such local network communicates with. The computer security device monitors data traffic, collecting it for analysis and data visualization, creating alerts upon detection of potentially dangerous communications, and blocking, redirecting, or replacing such data with corrupted data or predetermined innocuous information in a similar format to the original data. Methods of using such a computer security device are also disclosed.