Abstract
Information leakage from client PCs has grown into a serious problem in recent years. To address the problem, we propose file lifetime monitoring technology that enables users to accurately trace modifications of confidential documents by user commands such as copy, rename, and save, as well as copy/paste editing operations. The File Lifetime Monitoring Technology is based on analyzing primitive events from the file system and GUI and anticipates confidentiality risks using prepared knowledge of applications. Using monitoring results effectively, confidential information can be managed on workers’PCs. The prototype system has been successfully operated, and 243 co-workers tried it out. The trial shows that our system is practical in terms of performance degradation. Experiments show that both the quality and quantity of monitoring results are better than conventional monitoring software. In particular, the log size of our system can be reduced eleven times from the size of conventional software.
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
CSI: 2003 CSI/FBI Computer Crime and Security Survey. 8th annual (2003)
Soliton Systems K.K Home Page: InfoTrace Product Information (in Japanese), http://www.soliton.co.jp/products/infotrace/
IRI Commerce and Technology Inc: AllWatch Product Information (in Japanese), http://www.iri-ct.co.jp/allwatcher/
MOTEX K.K Home Page: LanScopeCAT5 Product Information (in Japanese), http://www.motex.co.jp/cat5/top.shtml
Microsoft Home Page: Microsoft Active Accessibility. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/msaa/msaastart_9w2t.asp
Richter, J.: Microsoft Press, 3rd edn. (1997)
Microsoft Home Page: FileMon for Windows v7.04, http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
Author information
Authors and Affiliations
Editor information
Rights and permissions
Copyright information
© 2007 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Kida, K., Sakamoto, H., Shimazu, H., Tarumi, H. (2007). InfoCage: A Development and Evaluation of Confidential File Lifetime Monitoring Technology by Analyzing Events from File Systems and GUIs. In: Miyaji, A., Kikuchi, H., Rannenberg, K. (eds) Advances in Information and Computer Security. IWSEC 2007. Lecture Notes in Computer Science, vol 4752. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-75651-4_17
Download citation
DOI: https://doi.org/10.1007/978-3-540-75651-4_17
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-75650-7
Online ISBN: 978-3-540-75651-4
eBook Packages: Computer ScienceComputer Science (R0)