Preventing document leakage through active document

Abstract

Abstract-Electronicdocuments inside any enterprise environment are assets that add to the enterprise's capital in intellectual property such as design patents or customer information, securing, these assets is a priority requirement in any security system design. The security of these documents suffers when they have migrated outside the organisation security system, as there is not always a way to extend the enterprise security policy to limit/prevent access to those assets. This paper presents the challenges faced when preventing document leakage. We propose active document as a measure to control/limit access when electronic document are outside its domain.

Survey of Techniques on Data Leakage Protection and Methods to address the Insider threat

“…In [35] DRM systems are compared with the proposed DLPS (UC4Win). In [36] the authors reveal some of the problems to control the use of such data [20], [21]. The security mechanisms can be content deletion, content editing, content reading, or an authorized user to perform each operation.…”

“…In [36] the main problems of different solutions for information protection within an organization are identified, among which DLP and DRM solutions are described. A solution based on active documents and DRM is proposed addition it can serve to improve the security and integrity of documents based on the information of which parts of the document are of greatest interest to the user.…”

“…Limitations that have emerged over the years are the almost complete dependence on the quality of the security policies used and the precise definition of the data to be protected, as well as the necessary over-approaches in the dynamic monitoring of the data flow [35]. In [36] four challenges facing document security are identified, one of them being human negligence, DLPS are not able to overcome this challenge since as a means of security they rely on user, password and security policies to ensure the security of information, without taking into account that the user himself may be the one who provides the data leakage, they themselves are the tools to perform the security policy of any organization so a user and password is not enough. The tracking of unmarked documents [37] or not classified as confidential also represented a major limitation in the DLPS at the time.…”

On the Difficult Tradeoff Between Security and Privacy: Challenges for the Management of Digital Identities

“…Although DRM is usually assumed to be just a mechanism to protect intellectual property, it also provides privacy protection as a result of avoiding information leakage in assets with Personal Identifiable Information (PII) [2]. DRM systems can (and, in some cases, should) be extended considering P2P privacy-respectful platforms [29] and Private Information Retrieval protocols (PIR) [3].…”