Preventing information leakage between collaborating organisations

Abstract

Information sharing and protection against leakage is a critical problem especially for organisations having sensitive information. Sharing content between individuals in the same organisation extends to exchanging and sharing content between collaborating organisations. In this paper we propose a novel solution for preventing shared information between collaborating organisations from getting leaked to unauthorised users inside the distination organisation or out side it. In addition, once the content is in the hands of authorised users our solution prevents unethical authorised users from leaking such content to other users in the same organisation or third parties.In this paper we provide a mechanism for a source organisation to send content to another collaborating organisation in such a way the sent content is either accessed by a specific group of users performing a specific task or it could be accessed by all devices member in the destination organisation, which should be based on organisation policy and requirements. In the proposed solution we used trusted computing technology to provide a hardware-based root of trust for the master controller and organisation devices.

Information leakage detection in distributed systems using software agents

“…If permissions 1 For future work, the Watermarking Agent shall be made able to detect valid changes of permissions tags, and re-watermark files accordingly. Add inotify watch descriptor for "write" and "create" operations within d i 4: end for 5: loop 6: f ← Read event from event descriptor W…”

“…A Watermarking Agent will be awakened upon receipt of signal from the Monitor Agent indicating that a new file has been created and will therefore need to be watermarked 1 . Algorithm 1 provides a broad representation of the operations performed by our Watermarking Agent.…”

“…RELATED WORK Since most of the studies in security community deal with preventing outsiders access, there are only a few literatures that have proposed methodologies to address the issue of information leakage though insiders. Alawneh and Abbadi introduced a mechanism to protect shared information among organizations via Trusted Platform Module (TPM) [1], [2]. By creating master controller and domains for TPM equipped devices, contents can only be accessed through the allowed devices.…”

Dynamic Secure Interconnection for Security Enhancement in Cloud Computing

“…Corresponding protocols are also proposed to manage the domain creation, interaction and termination. The interaction among the domains is based on secure channels [12] to establish trustworthy self-management foundation.…”

A Policy and Trust-based Secure Communication Protocol in Information Systems

“…Muntaha Alawneh and Imad M. Abbadi [5] have suggested a mechanism that enables the source organization to send content based on organization policy and requirements to another collaborating organization in such a manner that it could be accessed only by a specific group of users performing a particular task or by all device members in the destination organization. They have consummate this by providing a hardware-based root of trust for the master controller and organization devices exploiting trusted computing technology.…”