SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR PREVENTING ACCESS TO DATA WITH RESPECT TO A DATA ACCESS ATTEMPT ASSOCIATED WITH A REMOTE DATA SHARING SESSION

• US 20140283145A1
• Filed: 05/29/2014
• Published: 09/18/2014
• Est. Priority Date: 09/05/2007
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, LLC
• Inventors: Chebiyyam, Gopi, Basavapatna, Prasanna
• Granted Patent: US 10,198,587 B2
• Time in Patent Office: Days
• US Class Current: 726/30
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection

Abstract

A system, method, and computer program product are provided for preventing access to data associated with a data access attempt. In use, a data access attempt associated with a remote data sharing session is identified. Further, access to the data is prevented.

Claims

1. A machine-readable medium, on which are stored instructions, comprising instructions that when executed cause a machine to:

detect an attempt to access a remote location;

determine whether the remote location is associated with a remote desktop sharing application; and

prevent access to the remote location responsive to the determination.

2. The machine-readable medium of claim 1, wherein the instructions that when executed cause the machine to prevent access to the remote location responsive to the determination comprise instructions that when executed cause the machine to:

prevent content associated with the remote location from being presented on the machine.

3. The machine-readable medium of claim 1, wherein the instructions that when executed cause the machine to prevent access to the remote location responsive to the determination comprise instructions that when executed cause the machine to:

prevent an access request from being communicated to the remote location.

4. The machine-readable medium of claim 1, wherein the instructions that when executed cause the machine to prevent access to the remote location responsive to the determination comprise instructions that when executed cause the machine to:

present a notification that access is prevented; and

receive an input directing allowance of the request.

5. The machine-readable medium of claim 1, wherein the instructions that when executed cause the machine to prevent access to the remote location responsive to the determination comprise instructions that when executed cause the machine to:

match the remote location with a predefined list of remote locations to which access is allowed;

allow access to the remote location responsive to the match.

6. The machine-readable medium of claim 1, where the instructions further comprise instructions that when executed cause the machine to predetermine an association between the remote location and a remote desktop sharing application based on an automatic configuration.

7. A machine-readable medium, on which are stored instructions, comprising instructions that when executed cause a machine to:

detect a request to access data;

determine whether the data has a predetermined fingerprint associated with one or more applications;

identify an application associated with the request; and

determine whether to allow the request based on the predetermined fingerprint and the identified application.

8. The machine-readable medium of claim 7, wherein the request includes an identifier of an application that issued the request.

9. The machine-readable medium of claim 7, wherein the instructions that when executed cause the machine to determine whether the data has a predetermined fingerprint associated with one or more applications comprise instructions that when executed cause the machine to:

lookup a fingerprint of the data in a database of predetermined fingerprints.

10. The machine-readable medium of claim 9, wherein the database comprises fingerprints and applications associated with the fingerprints that are allowed to access the data.

11. The machine-readable medium of claim 9, wherein the database comprises fingerprints and applications associated with the fingerprints that are not allowed to access the data.

12. The machine-readable medium of claim 9, wherein the database comprises an identification of a dedicated application that is allowed to access any data.

13. The machine-readable medium of claim 7, wherein the instructions that when executed cause the machine to determine whether to allow the request comprise instructions that when executed cause the machine to:

determine whether a remote desktop sharing session is in operation; and

prevent initiation of the identified application responsive to the determination.

14. A machine-readable medium, on which are stored instructions, comprising instructions that when executed cause a machine to:

determine whether remote desktop sharing is currently enabled;

identify a fingerprint of data to which access is requested; and

determine whether to allow access to the data responsive to a match of the fingerprint with a predetermined fingerprint.

15. The machine-readable medium of claim 14, wherein the instructions that when executed cause the machine to determine whether remote desktop sharing is currently enabled comprise instructions that when executed cause the machine to determine whether a remote desktop sharing application is executing.

16. The machine-readable medium of claim 14, wherein the instructions that when executed cause the machine to identify a fingerprint of data to which access is requested comprise instructions that when executed cause the machine to hash the data.

17. The machine-readable medium of claim 14, wherein the instructions that when executed cause the machine to identify a fingerprint of data to which access is requested comprise instructions that when executed cause the machine to calculate a value of the data utilizing a predetermined algorithm.

18. The machine-readable medium of claim 14, wherein the instructions that when executed cause the machine to determine whether to allow access to the data comprise instructions that when executed cause the machine to lookup a fingerprint of the data in a database of predetermined fingerprints of data.

19. The machine-readable medium of claim 18, wherein the database is stored remotely to the machine.

20. The machine-readable medium of claim 14, wherein the instructions further comprise instructions that when executed cause the machine to close data already opened prior to enablement of a remote desktop sharing session.