NDLI: Data loss prevention using an ephemeral key

Content Provider	IEEE Xplore Digital Library
Author	Blanke, W.J.
Copyright Year	2011
Description	Author affiliation: Enterprise Security Group, Symantec Corporation, Mountain View, CA (Blanke, W.J.)
Abstract	With the advent of cloud storage, smartphones, MP3 music players, and removable flash devices, data is more mobile than ever before. However, with this newfound mobility come the issues of how to determine whether data may be too sensitive to leave a user's device, and, if it is appropriate to save the data to remote storage, how best to secure it for the long term. Data loss prevention applications perform this job, typically by redirecting potentially sensitive saved files to a secure local storage quarantine, scanning them, and then doing a final copy to remote storage if the scan passes policy. The problem with local storage quarantine is the additional overhead required to essentially serially write the file twice-once to local storage and finally once to the remote storage destination. This paper presents an alternate method for doing data loss prevention using an ephemeral cryptographic key. By using an ephemeral key, encrypted data can be safely scanned in situ on the remote storage destination and securely removed if inappropriate. This direct technique results in better efficiency and lower latency than a circuitous local storage quarantine. An added benefit of using an ephemeral key for data loss prevention is that the encrypted file can be secured afterward to the persistent keys of multiple recipients with a minimum of additional post-processing.
Starting Page	412
Ending Page	418
File Size	625046
Page Count	7
File Format	PDF
ISBN	9781612843803
e-ISBN	9781612843834
DOI	10.1109/HPCSim.2011.5999854
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-07-04
Publisher Place	Turkey
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Performance evaluation Encryptable file systems Cloud computing File systems Ash Universal Serial Bus Cryptography Engines Data loss prevention Ephemeral key
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Secure personal cloud storage

Research on Data Security Access Model of Cloud Computing Platform

Protecting private cloud located within public cloud

Virtual USB drive: A key component for smart home storage architecture

A high-performance platform-based SoC for information security

Study of file encryption and decryption system using security key

An Evaluation of Side-Information Assisted Forensic Hash Matching

Performance of Two Linux Methods for Encrypting Data at the File System Level in CE Devices

Two Factor Encryption in Cloud Storage Providers Using Hardware Tokens

Data loss prevention using an ephemeral key

Similar Documents

Secure personal cloud storage

Research on Data Security Access Model of Cloud Computing Platform

Protecting private cloud located within public cloud

Virtual USB drive: A key component for smart home storage architecture

A high-performance platform-based SoC for information security

Study of file encryption and decryption system using security key

An Evaluation of Side-Information Assisted Forensic Hash Matching

Performance of Two Linux Methods for Encrypting Data at the File System Level in CE Devices

Two Factor Encryption in Cloud Storage Providers Using Hardware Tokens

Data loss prevention using an ephemeral key