Security

ILeak: A Lightweight System for Detecting Inadvertent Information Leaks

Free registration required

Executive Summary

Data loss incidents, where data of sensitive nature are exposed to the public, have become too frequent and have caused damages of millions of dollars to companies and other organizations. Repeatedly, information leaks occur over the Internet, and half of the time they are accidental, caused by user negligence, misconfiguration of software, or inadequate understanding of an application's functionality. This paper presents iLeak, a lightweight, modular system for detecting inadvertent information leaks. Unlike previous solutions, iLeak builds on components already present in modern computers. In particular, the authors employ system tracing facilities and data indexing services, and combine them in a novel way to detect data leaks.

  • Format: PDF
  • Size: 156.6 KB