Concepedia

An Active Data Leakage Prevention Model for Insider Threat

Jiangjiang Wu, Jie Zhou, Jun Ma, Songzhu Mei, Jiangchun Ren

2011 · 15 citations · 8 references

TL;DR

Insider threat is the primary source of data leakage, yet existing research focuses on detection rather than defense, and conventional DLP solutions based on terminal or boundary controls struggle in distributed environments. The paper proposes an active data leakage prevention model specifically targeting insider threats. The model integrates trusted storage with virtual isolation technologies, specifies protection requirements at the data‑object level, and includes dynamic isolation strategies. The authors provide an implementation framework, formal description, and proofs of the model’s security properties.

Abstract

Insider threat has become the main vector of data leakage. Existing research on it mainly focuses on sensing and detection without defense capabilities. Meanwhile, traditional technologies for data leakage prevention rely on the terminal or boundary control which is difficult for data leakage in distributed environment. This paper presents an active data leakage prevention model for insider threat that combines trusted storage with virtual isolation technologies and expresses the protection requirements from the aspect of data object. We also show an implementation framework and give formal description as well as security properties proof. Finally, we give implementation strategies of dynamic isolation mechanisms.