Title :
Can Content-Based Data Loss Prevention Solutions Prevent Data Leakage in Web Traffic?
Author :
Gugelmann, David ; Studerus, Pascal ; Lenders, Vincent ; Ager, Bernhard
Abstract :
The effectiveness of data loss prevention (DLP) solutions remains obscure, especially with respect to the types of attacks they claim to protect against. A systematic analysis of HTTP data leakage vectors and a test of three content-based DLP solutions give insight into these solutions´ vulnerabilities.
Keywords :
computer network security; data protection; telecommunication traffic; transport protocols; HTTP data leakage vectors; Web traffic; content-based DLP; content-based data loss prevention; data leakage prevention; Browsers; Data models; Encoding; Loss measurement; Malware; Uniform resource locators; Workstations; DLP; HTTP; Web browsing; Web traffic; data exfiltration; data loss; data loss prevention; malware; security;
Journal_Title :
Security & Privacy, IEEE
DOI :
10.1109/MSP.2015.88
