Poster: High Performance Data Leak Detection

Data leaks on personal computers and organization networks may be caused by mistakes of users (e.g., accidentally sending sensitive documents to a wrong recipient), stolen laptops, malicious insiders, and infection with malicious software. Preventing data leaks typically require a suite of security technologies, including firewalls and intrusion detection/prevention systems at the network, as well as file encryption, strong authentication, and high system assurance tools on the hosts. The multiple points of security measures are complementary to each other and this paper addresses the problem of network-based data leak detection, specifically, how to accurately and efficiently inspect traffic content for patterns of sensitive information. The data may be transformed during the transmission. Network-based data leak detection (DLD) imposes unique research challenges, including: