Systems and methods for increasing compliance with data loss prevention policies

• US 9,330,273 B2
• Filed: 05/02/2014
• Issued: 05/03/2016
• Est. Priority Date: 03/19/2014
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Khetawat, Rupesh Hanumant, Ghatge, Amol Sharadchandra, Sonawane, Sagar Shashikant
• Primary Examiner(s): McNally, Michael S
• Application Number:
  US14/268,157
• Publication Number:
  US 20150269386A1
• Time in Patent Office: 732 Days
• Field of Search: 726/1
• US Class Current: 1/1
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules

Abstract

A computer-implemented method for increasing compliance with data loss prevention policies may include (1) identifying a file that is subject to a data loss prevention policy, (2) determining a classification of the file according to the data loss prevention policy, (3) identifying a graphical user interface that is configured to display a representation of the file, and (4) enhancing the representation of the file within the graphical user interface with a visual indication of the classification of the file according to the data loss prevention policy. Various other methods, systems, and computer-readable media are also disclosed.

Claims

1. A computer-implemented method for increasing compliance with data loss prevention policies, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:

identifying a file that is subject to a data loss prevention policy that comprises a set of rules that classify files according to sensitive information within the files;

determining a classification of the file according to the data loss prevention policy;

identifying a graphical user interface that is configured to display a representation of the file;

enhancing the representation of the file within the graphical user interface with a visual indication of the classification of the file according to the data loss prevention policy, wherein the visual indication comprises a modification of the representation of the file.

2. The computer-implemented method of claim 1, wherein enhancing the representation of the file with the visual indication is in response to detecting an attempt to copy the file to a destination that violates the data loss prevention policy.

3. The computer-implemented method of claim 1, further comprising:

detecting a modification of the data loss prevention policy, wherein the data loss prevention policy applies to a network;

displaying, on at least one computing device connected to the network, a notification designed to educate users about the modification of the data loss prevention policy.

4. The computer-implemented method of claim 3, wherein the notification comprises at least one of:

a modification to a login screen comprising information about the modification of the data loss prevention policy;

a modification to a lock screen comprising information about the modification of the data loss prevention policy;

a modification to a wallpaper comprising information about the modification of the data loss prevention policy;

a popup notification comprising information about the modification of the data loss prevention policy;

a modification to a screensaver comprising information about the modification of the data loss prevention policy.

5. The computer-implemented method of claim 3, wherein the notification is based at least in part on information provided by an administrator to be displayed to users about the modification to the data loss prevention policy.

6. The computer-implemented method of claim 1, wherein the visual indication of the classification of the file according to the data loss prevention policy comprises at least one of:

a visual overlay on the representation of the file;

a border around the representation of the file;

a tinting of the representation of the file;

a tag on the representation of the file.

7. The computer-implemented method of claim 1, further comprising:

detecting a potential data transfer action initiated by a user;

displaying a notification to the user that is designed to educate the user about a data loss risk caused by the potential data transfer action in response to detecting the potential data transfer action.

8. The computer-implemented method of claim 7, further comprising:

determining that the user has previously committed a violation of the data loss prevention policy;

determining that the violation of the data loss prevention policy was committed via a type of data transfer action that matches the type of the potential data transfer action;

basing content within the notification to the user on the type of the potential data transfer action.

9. The computer-implemented method of claim 7, wherein displaying the notification to the user is in response to determining that the user has met a predetermined threshold for previous violations of the data loss prevention policy.

10. The computer-implemented method of claim 7, wherein at least one of:

the potential data transfer action comprises the user opening an email application and the notification comprises a warning comprising content about a previous violation of the data loss prevention policy committed by the user via email;

the potential data transfer action comprises the user connecting a storage device to a device that comprises sensitive data and the notification comprises a warning comprising content about a previous violation of the data loss prevention policy committed by the user via connecting a storage device to the device that comprises the sensitive data;

the potential data transfer action comprises the user starting a file transfer session and the notification comprises a warning comprising content about a previous violation of the data loss prevention policy committed by the user via file transfer.

11. The computer-implemented method of claim 1, further comprising adding a tooltip to the modified representation of the file that displays information about the data loss prevention policy in response to a mouseover action.

12. A system for increasing compliance with data loss prevention policies, the system comprising:

a file identification module, stored in memory, that identifies a file that is subject to a data loss prevention policy that comprises a set of rules that classify files according to sensitive information within the files;

a determination module, stored in memory, that determines a classification of the file according to the data loss prevention policy;

an interface identification module, stored in memory, that identifies a graphical user interface that is configured to display a representation of the file;

an enhancement module, stored in memory, that enhances the representation of the file within the graphical user interface with a visual indication of the classification of the file according to the data loss prevention policy, wherein the visual indication comprises a modification of the representation of the file;

at least one physical processor configured to execute the file identification module, the determination module, the interface identification module, and the enhancement module.

13. The system of claim 12, wherein the enhancement module enhances the representation of the file with the visual indication in response to detecting an attempt to copy the file to a destination that violates the data loss prevention policy.

14. The system of claim 12, further comprising:

a detection module, stored in memory, that detects a modification of the data loss prevention policy, wherein the data loss prevention policy applies to a network;

a display module, stored in memory, that displays, on at least one computing device connected to the network, a notification designed to educate users about the modification of the data loss prevention policy.

15. The system of claim 14, wherein the notification comprises at least one of:

a modification to a login screen comprising information about the modification of the data loss prevention policy;

a modification to a lock screen comprising information about the modification of the data loss prevention policy;

a modification to a wallpaper comprising information about the modification of the data loss prevention policy;

a popup notification comprising information about the modification of the data loss prevention policy;

a modification to a screensaver comprising information about the modification of the data loss prevention policy.

16. The system of claim 14, wherein the notification is based at least in part on information provided by an administrator to be displayed to users about the modification to the data loss prevention policy.

17. The system of claim 12, wherein the visual indication of the classification of the file according to the data loss prevention policy comprises at least one of:

a visual overlay on the representation of the file;

a border around the representation of the file;

a tinting of the representation of the file;

a tag on the representation of the file.

18. The system of claim 12, further comprising:

a detection module, stored in memory, that detects a potential data transfer action initiated by a user;

a display module, stored in memory, that displays a notification to the user that is designed to educate the user about a data loss risk caused by the potential data transfer action in response to detecting the potential data transfer action.

19. The system of claim 18:

further comprising a violation determination module, stored in memory, that determines that the user has previously committed a violation of the data loss prevention policy;

wherein the violation determination module determines that the violation of the data loss prevention policy was committed via a type of data transfer action that matches the type of the potential data transfer action;

wherein the display module bases content within the notification to the user on the type of the potential data transfer action.

20. A non-transitory computer-readable medium comprising one or more computer-readable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

identify a file that is subject to a data loss prevention policy that comprises a set of rules that classify files according to sensitive information within the files;

determine a classification of the file according to the data loss prevention policy;

identify a graphical user interface that is configured to display a representation of the file;

enhance the representation of the file within the graphical user interface with a visual indication of the classification of the file according to the data loss prevention policy, wherein the visual indication comprises a modification of the representation of the file.