Show simple item record

dc.contributor.authorMundada, Yogesh
dc.contributor.authorRamachandran, Anirudh
dc.contributor.authorTariq, Mukarram Bin
dc.contributor.authorFeamster, Nick
dc.date.accessioned2011-01-19T22:30:53Z
dc.date.available2011-01-19T22:30:53Z
dc.date.issued2011
dc.identifier.urihttp://hdl.handle.net/1853/36612
dc.descriptionResearch area: Information Security & Cryptography
dc.descriptionResearch topic: Network Security
dc.description.abstractOrganizations must control where private information spreads; this problem is referred to in the industry as data leak prevention. Commercial solutions for DLP are based on scanning content; these impose high overhead and are easily evaded. Research solutions for this problem, information flow control, require rewriting applications or running a custom operating system, which makes these approaches difficult to deploy. They also typically enforce information flow control on a single host, not across a network, making it difficult to implement an information flow control policy for a network of machines. This paper presents Pedigree, which enforces information flow control across a network for legacy applications. Pedigree allows enterprise administrators and users to associate a label with each file and process; a small, trusted module on the host uses these labels to determine whether two processes on the same host can communicate. When a process attempts to communicate across the network, Pedigree tracks these information flows and enforces information flow control either at end-hosts or at a network switch. Pedigree allows users and operators to specify network-wide information flow policies rather than having to specify and implement policies for each host. Enforcing information flow policies in the network allows Pedigree to operate in networks with heterogeneous devices and operating systems. We present the design and implementation of Pedigree, show that it can prevent data leaks, and investigate its feasibility and usability in common environments.en_US
dc.language.isoen_USen_US
dc.publisherGeorgia Institute of Technologyen_US
dc.relation.ispartofseriesSCS Technical Report ; GT-CS-11-01en_US
dc.subjectData leaksen_US
dc.subjectEncryptionen_US
dc.subjectInformation flow controlen_US
dc.subjectInformation securityen_US
dc.subjectLabel managementen_US
dc.subjectNetwork securityen_US
dc.titlePractical Data-Leak Prevention for Legacy Applications in Enterprise Networksen_US
dc.typeTechnical Reporten_US
dc.contributor.corporatenameGeorgia Institute of Technology. College of Computing
dc.contributor.corporatenameGeorgia Institute of Technology. School of Computer Science


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record