System and method for using file hashes to track data leakage and document propagation in a network
US9367707B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Feb 23, 2012 |
| Grant date | Jun 14, 2016 |
| Priority date | — |
| Expiry date | Jul 1, 2034 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F16/152
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
The system and method described herein may use file hashes to track data leakage and document propagation in a network. For example, file systems associated with known reference systems and various user devices may be compared to classify the user devices into various groups based on differences between the respective file systems, identify files unique to the various groups, and detect potential data leakage or document propagation if user devices classified in certain groups include any files that are unique to other groups. Additionally, various algorithms may track locations, movements, changes, and other events that relate to normal or typical activity in the network, which may be used to generate statistics that can be compared to subsequent activities that occur in the network to detect potentially anomalous activity that may represent potential data leakage or document propagation.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.