Data Leakage Prevention for Secure Cross-Domain Information Exchange

Abstract

Abstract-Cross-domain information exchange is an increasingly important capability for conducting efficient and secure operations, both within coalitions and within single nations. A data guard is a common cross-domain sharing solution that inspects and validates that the security labels of exported data objects are such that they can be released according to policy. While we see that guard solutions can be implemented with high assurance, we find that obtaining an equivalent level of assurance in the correctness of the security labels easily becomes a hard problem in practical scenarios. Thus, a weakness of the guardbased solution is that there is often limited assurance in the correctness of the security labels. To mitigate this, guards make use of content checkers such as dirty word lists as a means for detecting mislabeled data.To improve the overall security of such cross-domain solutions we investigate more advanced content checkers based on the use of machine learning. Instead of relying on manually specified dirty word lists, we can build data-driven methods that automatically infer the words associated with classified content. However, care must be taken when constructing and deploying these methods as naive implementations are vulnerable to manipulation attacks. In order to provide a better context for performing classification, we monitor the incoming information flow and use the audit trail to construct controlled environments. The usefulness of said deployment scheme is demonstrated using a real collection of classified and unclassified documents.

Impact of Gender and Conference Size on Conference Preferences – Employing Natural Language Processing

“…First, n-gram frequencies were generated. N-gram refers to a contiguous sequence of n words from a given sequence of text (Kongsgard, Nordbotten, Mancini, Haakseth, & Engelstad, 2017). N-gram language models are widely used in Natural Language Processing (NLP), such as speech recognition, machine translation, and information retrieval (Dang et al, 2016).…”

Enabling XEP-0258 Security Labels in XMPP

“…As mentioned earlier, labeling is not in itself enough in a cross-domain environment; we, however, need guards which implement the policy of an organization, a mission etc; deciding which participants can send messages and which class etc. For example, Kongsgård et al [4] build data-driven methods for guards which infer the words associated with classified content. Then when using "wrong" words in too low classes, an alarm is given.…”